PT-2021-23461 · Apache+1 · Apache Mina+1

Published 2021-11-01 · Updated 2026-05-18 · CVE-2021-41973

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache MINA versions prior to 2.1.5

Description A specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected.

Recommendations For Apache MINA versions prior to 2.1.5, update MINA to 2.1.5 or greater. As a temporary workaround, consider restricting the handling of HTTP requests to prevent indefinite looping until a patch is applied.

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CLEANSTART-2026-DD05788

CLEANSTART-2026-KU61465

CLEANSTART-2026-LE11246

CLEANSTART-2026-RN56220

CLEANSTART-2026-VH41554

CVE-2021-41973

GHSA-6MCM-J9CJ-3VC3

OESA-2021-1435

Affected Products

Apache Mina

Debian

References · 253

• https://nvd.nist.gov/vuln/detail/CVE-2023-34454 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42583 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-43642 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-24970 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-0341 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-1320 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58057 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-12801 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6763 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-41973 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-34455 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-1471 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-55163 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-41973 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46120 · Security Note