{"id":31131,"date":"2026-09-30T20:31:28","date_gmt":"2026-09-30T12:31:28","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-94029"},"modified":"2026-09-30T20:31:28","modified_gmt":"2026-09-30T12:31:28","slug":"cve-2026-94029","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-94029","title":{"rendered":"CVE-2026-94029 [MEDIUM] &#8211; Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5"},"content":{"rendered":"<p>Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name\/check-file-handle extension.\u00a0Apache MINA SSHD is a Java library for client-side and server-side SSH.<\/p>\n<p>Using a very small &#8220;block size&#8221; (for instance 256, which is the minimum) on a huge file generates many (file size \/ block size) hashes. The resulting SFTP reply message was accumulated fully in memory server-side, which could, with a suitably large\u00a0(possibly sparse)\u00a0file exhaust the server-side memory, taking down the server.<\/p>\n<p>Users are recommended to upgrade to version 2.20.0 or 3.0.0-M6, which fix this issue by imposing a maximum limit on the size of the reply. Many SFTP implementations have a general limit on the size of SFTP messages anyway; typically 256kB as in OpenSSH or also in Apache MINA SSHD.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name\/check-file-handle extension.\u00a0Apache MINA SSHD is a Java <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-31131","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/31131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=31131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=31131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=31131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}