CVE-2021-30129: Buffer Overflow in Apache Mina SSHD

The core vulnerability stems from BufferedIoOutputStream's write() implementation lacking proper bounds checking, as explicitly described in SSHD-1125. The JIRA ticket details that data could be written without respecting the max window size, allowing memory exhaustion. While BufferManager is not directly patched, it's involved in buffer allocation patterns for SFTP/port forwarding features mentioned in vulnerability descriptions. The high confidence on BufferedIoOutputStream.write comes from direct JIRA ticket documentation of the fix, while BufferManager.getBuffer is inferred from architectural patterns with medium confidence.