mina vulnerabilities (Ubuntu)
19 vulnerabilities.
-
minaUbuntu Apache MINA SSHD: Asynchronous authentication can bypass signature verification 9.1 Critical -
minaUbuntu Apache MINA SSHD: Repeated-publickey policy bypass on server 8.1 High -
minaUbuntu Apache MINA SSHD: LDAP injection in sshd-ldap 9.1 Critical -
minaUbuntu Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server 6.5 Medium -
minaUbuntu Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read 6.5 Medium -
minaUbuntu Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies 7.5 High -
minaUbuntu Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension 6.5 Medium -
minaUbuntu Apache MINA SSHD: LDAP password authentication ineffective 9.1 Critical -
minaUbuntu Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate 7.5 High -
minaUbuntu Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows 7.1 High -
minaUbuntu Apache MINA SSHD: SSH certificate options lack validations 7.3 High -
minaUbuntu Apache MINA SSHD: Remote execution of JGit commands can write files on the server 5.4 Medium -
minaUbuntu Apache MINA SSHD: Path traversal in SCP file reception 7.5 High -
minaUbuntu Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git 7.1 High -
minaUbuntu Apache MINA: CWE-502 Deserialization of Untrusted Data 9.8 Critical -
minaUbuntu Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE 9.8 Critical -
minaUbuntu Apache MINA: MINA applications using unbounded deserialization may allow RCE 10.0 Critical -
minaUbuntu Apache MINA HTTP listener DOS 6.5 Medium -
minaUbuntu Apache MINA SSLFilter security Issue 7.5 High