A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pki-acmeUpgrade tomcatjssUpgrade ldapjdk-javadocUpgrade jss-javadocUpgrade ldapjdkUpgrade python3-pkiUpgrade pki-base-javaUpgrade pki-kraUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-caUpgrade pki-baseUpgrade pki-serverUpgrade jss | May 13, 2022 | May 10, 2022 |
| Centos_linux | — | Upgrade pki-symkey-debuginfoUpgrade python3-pkiUpgrade pki-symkeyUpgrade ldapjdkUpgrade tomcatjssUpgrade pki-toolsUpgrade ldapjdk-javadocUpgrade jss-javadocUpgrade pki-base-javaUpgrade jss-debuginfoUpgrade pki-acmeUpgrade pki-core-debuginfoUpgrade pki-tools-debuginfoUpgrade pki-kraUpgrade jssUpgrade pki-core-debugsourceUpgrade pki-caUpgrade pki-baseUpgrade jss-debugsourceUpgrade pki-server | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade jss | Jul 30, 2024 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade pki-acmeUpgrade ldapjdk-javadocUpgrade pki-caUpgrade jssUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-baseUpgrade ldapjdkUpgrade pki-kraUpgrade pki-base-javaUpgrade pki-serverUpgrade tomcatjssUpgrade jss-javadocUpgrade python3-pki | May 18, 2022 | Feb 9, 2022 |
| Redhat_linux | — | Upgrade jss-javadocUpgrade pki-tools-debuginfoUpgrade python3-pkiUpgrade ldapjdkUpgrade tomcatjssUpgrade pki-baseUpgrade pki-core-debugsourceUpgrade ldapjdk-javadocUpgrade pki-base-javaUpgrade pki-symkey-debuginfoUpgrade jss-debugsourceUpgrade pki-kraUpgrade pki-core-debuginfoUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-acmeUpgrade pki-caUpgrade pki-serverUpgrade jss-debuginfoUpgrade jss | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade pki-symkey-debuginfoUpgrade jss-debuginfoUpgrade pki-toolsUpgrade pki-symkeyUpgrade pki-tools-debuginfoUpgrade jssUpgrade pki-core-debugsourceUpgrade jss-debugsourceUpgrade jss-javadocUpgrade pki-core-debuginfo | Mar 5, 2024 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub