mina2 vulnerabilities (Ubuntu)
24 vulnerabilities.
-
mina2Ubuntu Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder 9.8 Critical -
mina2Ubuntu Apache MINA SSHD: Asynchronous authentication can bypass signature verification 9.1 Critical -
mina2Ubuntu Apache MINA SSHD: Repeated-publickey policy bypass on server 8.1 High -
mina2Ubuntu Apache MINA SSHD: LDAP injection in sshd-ldap 9.1 Critical -
mina2Ubuntu Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server 6.5 Medium -
mina2Ubuntu Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read 6.5 Medium -
mina2Ubuntu Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies 7.5 High -
mina2Ubuntu Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension 6.5 Medium -
mina2Ubuntu Apache MINA SSHD: LDAP password authentication ineffective 9.1 Critical -
mina2Ubuntu Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232 9.8 Critical -
mina2Ubuntu Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate 7.5 High -
mina2Ubuntu Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows 7.1 High -
mina2Ubuntu Apache MINA SSHD: SSH certificate options lack validations 7.3 High -
mina2Ubuntu Apache MINA SSHD: Remote execution of JGit commands can write files on the server 5.4 Medium -
mina2Ubuntu Apache MINA SSHD: Path traversal in SCP file reception 7.5 High -
mina2Ubuntu Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232 9.8 Critical -
mina2Ubuntu Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git 7.1 High -
mina2Ubuntu Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2) 9.8 Critical -
mina2Ubuntu Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2) 9.8 Critical -
mina2Ubuntu Apache MINA: CWE-502 Deserialization of Untrusted Data 9.8 Critical -
mina2Ubuntu Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE 9.8 Critical -
mina2Ubuntu Apache MINA: MINA applications using unbounded deserialization may allow RCE 10.0 Critical -
mina2Ubuntu Apache MINA HTTP listener DOS 6.5 Medium -
mina2Ubuntu Apache MINA SSLFilter security Issue 7.5 High