CVE Feed

    Dashboard / CVE / CVE-2019-0231

    CVE-2019-0231

    Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.

    Published:Apr 14, 2019
    Last Modified:Feb 13, 2025
    EPS:Oct 1, 2019
    EPSS Score:0.00707
    CVSS Score:7.5

    Affected Products

    Vendor
    Apache
    Product
    Mina
    Vendor
    Redhat
    Product
    Jboss Enterprise Bpms Platform
    Vendor
    Redhat
    Product
    Jboss Enterprise Brms Platform
    Vendor
    Redhat
    Product
    Jboss Fuse
    Vendor
    Redhat
    Product
    Satellite
    Vendor
    Redhat
    Product
    Satellite Capsule

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-47065 (CVSS 9.8) — ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Asses…
    CVE-2026-42778 (CVSS 9.8) — The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue descri…
    CVE-2026-42779 (CVSS 9.8) — The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue descri…
    CVE-2026-41409 (CVSS 9.8) — The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete. The classname allowlist…
    CVE-2026-41635 (CVSS 9.8) — Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primit…
    CVE-2024-52046 (CVSS 10) — The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming …
    CVE-2021-41973 (CVSS 6.5) — In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indef…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High