A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pki-base-javaUpgrade tomcatjssUpgrade jss-javadocUpgrade pki-kraUpgrade ldapjdkUpgrade python3-pkiUpgrade pki-acmeUpgrade ldapjdk-javadocUpgrade pki-caUpgrade pki-serverUpgrade jssUpgrade pki-toolsUpgrade pki-baseUpgrade pki-symkey | May 13, 2022 | May 10, 2022 |
| Centos_linux | — | Upgrade pki-toolsUpgrade pki-symkeyUpgrade pki-base-javaUpgrade pki-symkey-debuginfoUpgrade ldapjdkUpgrade tomcatjssUpgrade jss-debuginfoUpgrade jss-javadocUpgrade python3-pkiUpgrade pki-acmeUpgrade ldapjdk-javadocUpgrade pki-serverUpgrade jss-debugsourceUpgrade pki-caUpgrade pki-kraUpgrade pki-core-debuginfoUpgrade pki-tools-debuginfoUpgrade pki-baseUpgrade jssUpgrade pki-core-debugsource | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade jss | Jul 30, 2024 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade jss-javadocUpgrade pki-serverUpgrade ldapjdkUpgrade pki-base-javaUpgrade tomcatjssUpgrade python3-pkiUpgrade pki-kraUpgrade pki-baseUpgrade ldapjdk-javadocUpgrade pki-toolsUpgrade pki-acmeUpgrade pki-caUpgrade pki-symkeyUpgrade jss | May 18, 2022 | Feb 9, 2022 |
| Redhat_linux | — | Upgrade jssUpgrade pki-serverUpgrade jss-debugsourceUpgrade pki-toolsUpgrade jss-debuginfoUpgrade pki-acmeUpgrade pki-caUpgrade pki-symkeyUpgrade pki-core-debuginfoUpgrade pki-kraUpgrade pki-baseUpgrade ldapjdk-javadocUpgrade jss-javadocUpgrade python3-pkiUpgrade pki-base-javaUpgrade tomcatjssUpgrade ldapjdkUpgrade pki-core-debugsourceUpgrade pki-tools-debuginfoUpgrade pki-symkey-debuginfo | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade pki-core-debugsourceUpgrade jssUpgrade pki-tools-debuginfoUpgrade jss-debugsourceUpgrade pki-core-debuginfoUpgrade jss-javadocUpgrade pki-symkeyUpgrade pki-symkey-debuginfoUpgrade jss-debuginfoUpgrade pki-tools | Mar 5, 2024 | Aug 24, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub