Vulnerability Description
A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dogtagpki | Network Security Services For Java | < 4.9.3 |
| Redhat | Enterprise Linux | 8.0 |
| Debian | Debian Linux | 10.0 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/security/cve/CVE-2021-4213Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2042900Issue TrackingPatchThird Party Advisory
- https://github.com/dogtagpki/jss/commit/3aabe0e9d59b0a42e68ac8cd0468f9c5179967d2PatchThird Party Advisory
- https://github.com/dogtagpki/jss/commit/5922560a78d0dee61af8a33cc9cfbf4cfa291448PatchThird Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-4213Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2021-4213Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2042900Issue TrackingPatchThird Party Advisory
- https://github.com/dogtagpki/jss/commit/3aabe0e9d59b0a42e68ac8cd0468f9c5179967d2PatchThird Party Advisory
- https://github.com/dogtagpki/jss/commit/5922560a78d0dee61af8a33cc9cfbf4cfa291448PatchThird Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-4213Third Party Advisory
FAQ
What is CVE-2021-4213?
CVE-2021-4213 is a vulnerability with a CVSS score of 7.5 (HIGH). A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force t...
How severe is CVE-2021-4213?
CVE-2021-4213 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-4213?
Check the references section above for vendor advisories and patch information. Affected products include: Dogtagpki Network Security Services For Java, Redhat Enterprise Linux, Debian Debian Linux.