CVE-2021-39116

3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.3%
top 51.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Atlassian Jira Data CenterAtlassian Jira Server
Timeline
PublishedSep 8
Latest updateMay 24

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the GIF Image Reader component. The affected versions are before version 8.13.14, and from version 8.14.0 before 8.19.0.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5atlassian/jira_data_centerunspecified — 8.13.14+2
▶NVDatlassian/jira_data_center8.14.0 — 8.19.0+1
▶CVEListV5atlassian/jira_serverunspecified — 8.13.14+2
▶NVDatlassian/jira_server8.14.0 — 8.19.0+1

Patches

Patch: jira.atlassian.com ↗Patch: jira.atlassian.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-225q-rmfw-6pfr: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (Do↗2022-05-24
▶
CVEList
CVE-2021-39116: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (Do↗2021-09-08
▶