CVE-2021-4213 — HIGH severity

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	debian_linux	—	—
debian	jss	< jss 5.2.0-1 (bookworm)	jss 5.2.0-1 (bookworm)
dogtagpki	network_security_services_for_java	< 4.9.3	4.9.3
dogtagpki	network_security_services_for_java	>= 5.0.0 < 5.1.0	5.1.0
redhat	enterprise_linux	—	—

GHSA

GHSA-727r-5fr6-wjfp: A flaw was found in JSS, where it did not properly free up all memory

ghsa_unreviewed·2022-08-25

CVE-2021-4213 [HIGH] CWE-401 GHSA-727r-5fr6-wjfp: A flaw was found in JSS, where it did not properly free up all memory A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.

OSV

CVE-2021-4213: A flaw was found in JSS, where it did not properly free up all memory

osv·2022-08-24·CVSS 7.5

CVE-2021-4213 [HIGH] CVE-2021-4213: A flaw was found in JSS, where it did not properly free up all memory A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.

Red Hat

JSS: memory leak in TLS connection leads to OOM

vendor_redhat·2022-02-09·CVSS 7.5

CVE-2021-4213 [HIGH] CWE-401 JSS: memory leak in TLS connection leads to OOM JSS: memory leak in TLS connection leads to OOM A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service. A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service. Package: jss (Red Hat Enterprise Linux 6) - Not affected Package: jss (Red Hat Enterprise Linux 7) - Not affected Package: jss (Red Hat Enterprise Linux 9) - Not affected

Debian

CVE-2021-4213: jss - A flaw was found in JSS, where it did not properly free up all memory. Over time...

vendor_debian·2021·CVSS 7.5

CVE-2021-4213 [HIGH] CVE-2021-4213: jss - A flaw was found in JSS, where it did not properly free up all memory. Over time... A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service. Scope: local bookworm: resolved (fixed in 5.2.0-1) bullseye: open forky: resolved (fixed in 5.2.0-1) sid: resolved (fixed in 5.2.0-1)

CVE-2021-4213: A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s…

Affected

CVSS provenance