CVE-2024-41909

Name of the Vulnerable Software and Affected Versions Apache MINA SSHD versions prior to 2.12.0

Description The issue, also known as a Terrapin attack, allows an attacker who can intercept traffic between the client and server to drop certain packets, potentially downgrading or disabling some security features. This could cause the client and server to end up with a connection that has reduced security.

Recommendations For Apache MINA SSHD versions prior to 2.12.0, upgrade to at least version 2.12.0 to apply the necessary mitigations against this issue. Ensure that both the client and server implementations are updated, as only updating one may not fully prevent the attack.