{"id":"CVE-2021-4213","aliases":["ALSA-2022:1851","DEBIAN-CVE-2021-4213","EUVD-2021-34071","GHSA-727r-5fr6-wjfp","OESA-2024-1208","OESA-2024-1220","OESA-2024-1221","RHSA-2022:1851","RHSA-2024:0774","RLSA-2022:1851","UBUNTU-CVE-2021-4213"],"status":"published","title":"A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted...","description":"A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01787,"percentile":0.78622,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2022-05-10T08:04:36Z","modified":"2026-10-29T11:01:15Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"jss","fixed_in":["4.9.3-1.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jss-javadoc","fixed_in":["4.9.3-1.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ldapjdk","fixed_in":["4.23.0-1.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ldapjdk-javadoc","fixed_in":["4.23.0-1.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pki-acme","fixed_in":["10.12.0-2.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pki-base","fixed_in":["10.12.0-2.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pki-base-java","fixed_in":["10.12.0-2.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pki-ca","fixed_in":["10.12.0-2.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pki-kra","fixed_in":["10.12.0-2.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pki-server","fixed_in":["10.12.0-2.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pki-symkey","fixed_in":["10.12.0-2.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pki-tools","fixed_in":["10.12.0-2.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-pki","fixed_in":["10.12.0-2.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"tomcatjss","fixed_in":["7.7.1-1.module_el8.6.0+2764+9fc58d50"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"jss","fixed_in":["5.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"jss","fixed_in":["5.2.0-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"jss","fixed_in":["4.9.3-1.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"jss","fixed_in":["4.9.3-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"jss","fixed_in":["4.9.3-1.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss","fixed_in":["0:4.9.3-1.module+el8.6.0+14244+60d461b7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debuginfo","fixed_in":["0:4.9.3-1.module+el8.6.0+14244+60d461b7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debugsource","fixed_in":["0:4.9.3-1.module+el8.6.0+14244+60d461b7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-javadoc","fixed_in":["0:4.9.3-1.module+el8.6.0+14244+60d461b7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk","fixed_in":["0:4.23.0-1.module+el8.5.0+11983+6ba118b4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk-javadoc","fixed_in":["0:4.23.0-1.module+el8.5.0+11983+6ba118b4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-acme","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base-java","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-ca","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debuginfo","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debugsource","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-kra","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-server","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey-debuginfo","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools-debuginfo","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-pki","fixed_in":["0:10.12.0-2.module+el8.6.0+14115+8b467244"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tomcatjss","fixed_in":["0:7.7.1-1.module+el8.6.0+13291+248751b1"],"sources":["osv"]},{"ecosystem":"Red Hat:certificate_system:10.4::el8","package":"jss","fixed_in":["0:4.9.8-1.module+el8pki+19895+c800dfbd"],"sources":["osv"]},{"ecosystem":"Red Hat:certificate_system:10.4::el8","package":"redhat-pki","fixed_in":["0:10.13.9-5.module+el8pki+21062+4ed906e8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"jss","fixed_in":["0:4.9.3-1.module+el8.6.0+788+76246f77"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"ldapjdk","fixed_in":["0:4.23.0-1.module+el8.7.0+1069+6f3de942","0:4.23.0-1.module+el8.5.0+701+8dc610e5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"pki-core","fixed_in":["0:10.12.0-2.module+el8.6.0+788+76246f77"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"tomcatjss","fixed_in":["0:7.7.1-1.module+el8.6.0+788+76246f77"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jss-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ldapjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23.0-1.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ldapjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23.0-1.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pki-acme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.12.0-2.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.12.0-2.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.12.0-2.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.12.0-2.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.12.0-2.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.12.0-2.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.12.0-2.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.12.0-2.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.12.0-2.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"tomcatjss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-1.module_el8.6.0+2764+9fc58d50"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-1"}]}],"versions":["4.3.1-4","4.3.1-5","4.3.1-6","4.3.1-7","4.4.2-1","4.4.2-2","4.4.2-3","4.4.2-4","4.4.2-5","4.4.2-6","4.4.3-1","4.4.4-1","4.5.0-1","4.5.0~a4-1","4.5.1-1","4.5.3-1","4.5.3-2","4.6.0-1","4.6.1-1","4.6.1-2","4.6.1-3","4.6.2-1","4.6.3-1","4.7.0-1","4.7.0~b1-1","4.7.0~b4-1","4.7.0~b4-2","4.7.1-1","4.7.2-1","4.7.3-1","4.8.0-1","4.8.0-2","4.9.1-1","5.0.0-1","5.1.0-1"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.3-1.module+el8.6.0+14244+60d461b7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.3-1.module+el8.6.0+14244+60d461b7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.3-1.module+el8.6.0+14244+60d461b7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.3-1.module+el8.6.0+14244+60d461b7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.23.0-1.module+el8.5.0+11983+6ba118b4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.23.0-1.module+el8.5.0+11983+6ba118b4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-acme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+14115+8b467244"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tomcatjss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.7.1-1.module+el8.6.0+13291+248751b1"}]}]},{"source":"osv","ecosystem":"Red Hat:certificate_system:10.4::el8","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-1.module+el8pki+19895+c800dfbd"}]}]},{"source":"osv","ecosystem":"Red Hat:certificate_system:10.4::el8","package":"redhat-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.13.9-5.module+el8pki+21062+4ed906e8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.3-1.module+el8.6.0+788+76246f77"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ldapjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.23.0-1.module+el8.7.0+1069+6f3de942"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ldapjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.23.0-1.module+el8.5.0+701+8dc610e5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-2.module+el8.6.0+788+76246f77"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"tomcatjss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.7.1-1.module+el8.6.0+788+76246f77"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.1-6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.2-1","4.4.2-2","4.4.2-3","4.4.2-6","4.4.3-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.6.1-3","4.6.2-1","4.6.3-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-2","5.0.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2-1","5.5.0-1","5.5.0-1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.5.0-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.0~beta3-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.5.0-1build1","5.9.0~beta3-3ubuntu1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"dogtag","product":"jss"},{"vendor":"dogtagpki","product":"network_security_services_for_java"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042900","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4213","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-4213","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/dogtagpki/jss/commit/5922560a78d0dee61af8a33cc9cfbf4cfa291448","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/dogtagpki/jss/commit/3aabe0e9d59b0a42e68ac8cd0468f9c5179967d2","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4213","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-727r-5fr6-wjfp"},{"url":"https://errata.almalinux.org/8/ALSA-2022-1851.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-4213","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1208","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1220","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1221","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1851","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2019200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027470","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1851.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4213","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0774","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0774.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:1851","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4213","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-4213","description":"A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.","status":"published","published":"2022-08-24T15:07:48Z","modified":"2024-08-03T17:16:04.486Z","cwes":["CWE-401"],"updated_at":"2026-11-02T14:33:08.045407Z"}],"euvd":[{"id":"EUVD-2021-34071","description":"A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.","status":"published","published":"2022-08-24T15:07:48Z","modified":"2024-08-03T17:16:04Z","updated_at":"2026-11-03T03:25:10.418596Z"}],"ghsa":[{"id":"GHSA-727r-5fr6-wjfp","title":"A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted...","description":"A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.","status":"published","published":"2022-08-25T00:00:27Z","modified":"2023-01-27T05:00:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:41:45.792454Z"}],"nvd":[{"id":"CVE-2021-4213","description":"A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.","status":"published","published":"2022-08-24T16:15:09.98Z","modified":"2026-06-17T04:19:13.91Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:07:06.906968Z"}],"osv":[{"id":"CVE-2021-4213","description":"A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.","status":"published","published":"2022-08-24T16:15:09.98Z","modified":"2026-10-20T14:28:24.447746225Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:21.557945Z"},{"id":"DEBIAN-CVE-2021-4213","description":"A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.","status":"published","published":"2022-08-24T16:15:09.98Z","modified":"2026-10-23T18:04:16.238425686Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2024-1208","title":"jss security update","description":"JSS offers a implementation for java-based applications to use native NSS.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.(CVE-2021-4213)","status":"published","published":"2024-02-23T11:06:39Z","modified":"2026-08-18T01:17:11.68124832Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1220","title":"jss security update","description":"JSS offers a implementation for java-based applications to use native NSS.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.(CVE-2021-4213)","status":"published","published":"2024-03-01T11:06:40Z","modified":"2026-08-18T01:18:17.279187065Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1221","title":"jss security update","description":"JSS offers a implementation for java-based applications to use native NSS.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.(CVE-2021-4213)","status":"published","published":"2024-03-01T11:06:40Z","modified":"2026-08-18T01:18:17.607472107Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2022:1851","title":"Red Hat Security Advisory: pki-core:10.6 security and bug fix update","status":"published","published":"2024-09-16T06:51:45Z","modified":"2025-11-22T12:33:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2024:0774","title":"Red Hat Security Advisory: Red Hat Certificate System 10.4 for RHEL 8 security and bug fix update","status":"published","published":"2024-09-16T06:51:53Z","modified":"2025-11-22T13:06:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2022:1851","title":"Moderate: pki-core:10.6 security and bug fix update","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* JSS: memory leak in TLS connection leads to OOM (CVE-2021-4213)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.","status":"published","published":"2022-05-10T08:04:36Z","modified":"2026-02-04T12:00:07.986928Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-4213","description":"A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.","status":"published","published":"2022-08-24T16:15:00Z","modified":"2026-10-17T12:56:15.742044653Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"ALSA-2022:1851","title":"Moderate: pki-core:10.6 security and bug fix update","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.\n\nSecurity Fix(es):\n\n* JSS: memory leak in TLS connection leads to OOM (CVE-2021-4213)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-05-10T08:04:36Z","modified":"2026-10-29T11:01:15.722394132Z","updated_at":"2026-11-02T15:27:51.196609Z"}]}}