CVE-2021-4213
High
Description
A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.
SeverityHigh
CVSS7.5
Exploit probability78. percentile1.7%
Product
Dogtagpki Network Security Services For Java
PublishedAug 24, 2022
First seenAug 24, 2022
Weakness typeCWE-401CWE-401
How to fix
Update
- dogtagpki network_security_services_for_java4.9.3, 5.1.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dogtagpki network_security_services_for_java | v < 4.9.3, 5.0.0 ≤ v < 5.1.0 | 4.9.3, 5.1.0 |
| redhat enterprise_linux | 8.0 | — |
| debian debian_linux | 10.0, 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.