Not rated
CVE-2019-0231 Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the…
Description
Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache MINA | Versions not published |
References
- mina.apache.org mina.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache MINA
The 11 CVEs of Apache MINA →
CVE-2026-118636
**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls…
9.8
Critical
CVE-2026-94301
The fix for CVE-2026-47065/ZDRES-232 ("resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via…
9.8
Critical
CVE-2026-47321
The CompressionFilter class uses ZLib to deflate and inflate data sent and received
7.5
High
CVE-2026-47065
ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully…
9.8
Critical