CVE-2019-0231 | BDVDB-2026-123646 Detail

ApacheApache MINA

Description#

Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://mina.apache.org/mina-project/index.html#mina-211-mina-2021-released-posted-on-april-14-2019

Exploit#

No public exploit known

History#

Version 12019-10-01Record published in the CVE List.
Version 22025-02-13Most recent update recorded in the CVE List.