CVE:CVE-2021-41973
CNNVD:CNNVD-202111-238
Apache MINA是美国阿帕奇（Apache）基金会的一款网络应用程序框架。该产品主要用于开发高性能和高可伸缩性的网络应用程序。
Apache MINA存在安全漏洞，该漏洞源于在Apache MINA中，一个特定的、畸形的HTTP请求可能会导致HTTP Header解码器无限循环。解码器假设HTTP报头从缓冲区的开头开始，如果有比预期更多的数据，则进行循环。
solution:Upgrade apache mina to a higher version than 2.0.22,2.1.5,and avoid the version (,2.0.22),[2.1.0,2.1.5); Upgrade oracle banking_payments to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle banking_trade_finance_process_management to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle banking_treasury_management to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle communications_cloud_native_core_console to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle customer_management_and_segmentation_foundation to a higher version than 18.0,19.0,and avoid the version 18.0,19.0; Upgrade oracle flexcube_universal_banking to a higher version than 14.3,14.5,and avoid the version [14.0,14.3],14.5; Upgrade oracle fusion_middleware_common_libraries_and_tools to a higher version than 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0; Upgrade oracle oss_support_tools to a higher version than 2.12.42,and avoid the version 2.12.42