UBUNTU-CVE-2021-41973

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2021-41973

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-41973.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2021-41973

Related

CVE-2021-41973

Published

2021-11-01T09:15:00Z

Modified

2025-04-30T16:30:25Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater.

References

Affected packages

Ubuntu:Pro:16.04:LTS / mina

Package

Name: mina
Purl: pkg:deb/ubuntu/mina@1.1.7.dfsg-11?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.7.dfsg-11

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / mina2

Package

Name: mina2
Purl: pkg:deb/ubuntu/mina2@2.0.9-2?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.0.7+dfsg-2

2.0.9-1

2.0.9-2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / mina

Package

Name: mina
Purl: pkg:deb/ubuntu/mina@1.1.7.dfsg-12?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.7.dfsg-11

1.1.7.dfsg-12

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / mina2

Package

Name: mina2
Purl: pkg:deb/ubuntu/mina2@2.0.16-2?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.0.16-2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / mina

Package

Name: mina
Purl: pkg:deb/ubuntu/mina@1.1.7.dfsg-13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.7.dfsg-13

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / mina2

Package

Name: mina2
Purl: pkg:deb/ubuntu/mina2@2.0.19-2?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.0.19-2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / mina

Package

Name: mina
Purl: pkg:deb/ubuntu/mina@1.1.7.dfsg-13?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.7.dfsg-13

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / mina2

Package

Name: mina2
Purl: pkg:deb/ubuntu/mina2@2.1.5-1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.5-1

Affected versions

2.*

2.1.4-2

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.1.5-1",
            "binary_name": "libmina2-java"
        },
        {
            "binary_version": "2.1.5-1",
            "binary_name": "libmina2-java-doc"
        }
    ]
}

Ubuntu:24.10 / mina

Package

Name: mina
Purl: pkg:deb/ubuntu/mina@1.1.7.dfsg-14?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.7.dfsg-13ubuntu1

1.1.7.dfsg-14

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / mina

Package

Name: mina
Purl: pkg:deb/ubuntu/mina@1.1.7.dfsg-13ubuntu1?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.7.dfsg-13

1.1.7.dfsg-13ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:25.04 / mina

Package

Name: mina
Purl: pkg:deb/ubuntu/mina@1.1.7.dfsg-14?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.7.dfsg-14

Ecosystem specific

{
    "ubuntu_priority": "medium"
}