As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-47321: Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate
Apache MINA's CompressionFilter does not limit the size of decompressed data from incoming zlib streams, allowing an attacker to send a small compressed payload that expands to an extremely large size and consumes server resources. The vulnerability affects MINA versions 2.0.0 through 2.0.28, 2.1.0 through 2.1.12, and 2.2.0 through 2.2.7. Organizations using the mina-filter-compression module should upgrade to patched versions.
Why it matters: Teams deploying Apache MINA with compression enabled face denial of service risk from remote attackers; upgrade to MINA 2.0.29, 2.1.13, or 2.2.8 to remediate.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-47321: Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate
CVE-2026-47321 is an unbounded decompression amplification vulnerability in Apache MINA's CompressionFilter class that affects versions 2.2.0 before 2.2.8, 2.1.0 before 2.1.13, and 2.0.0 before 2.0.29. The flaw occurs when ZLib inflates incoming data without controlling the resulting size, enabling a distributed denial of service (DDoS) attack.
Why it matters: Organizations running affected Apache MINA versions with compression enabled face denial of service risk from remote attackers sending crafted compressed payloads; upgrade to patched versions immediately.
- Source published
- First seen by Cybersecurity Tracker