A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pki-toolsUpgrade pki-caUpgrade pki-symkeyUpgrade jssUpgrade pki-baseUpgrade pki-serverUpgrade ldapjdk-javadocUpgrade pki-kraUpgrade pki-acmeUpgrade python3-pkiUpgrade pki-base-javaUpgrade ldapjdkUpgrade tomcatjssUpgrade jss-javadoc | May 13, 2022 | May 10, 2022 |
| Centos_linux | — | Upgrade pki-caUpgrade pki-tools-debuginfoUpgrade jss-debugsourceUpgrade pki-baseUpgrade pki-kraUpgrade pki-core-debuginfoUpgrade jssUpgrade pki-core-debugsourceUpgrade pki-serverUpgrade python3-pkiUpgrade pki-base-javaUpgrade pki-toolsUpgrade tomcatjssUpgrade ldapjdk-javadocUpgrade pki-acmeUpgrade jss-debuginfoUpgrade pki-symkey-debuginfoUpgrade jss-javadocUpgrade ldapjdkUpgrade pki-symkey | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade jss | Jul 30, 2024 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade ldapjdk-javadocUpgrade pki-caUpgrade pki-baseUpgrade pki-symkeyUpgrade pki-toolsUpgrade jssUpgrade pki-acmeUpgrade pki-serverUpgrade tomcatjssUpgrade python3-pkiUpgrade ldapjdkUpgrade jss-javadocUpgrade pki-kraUpgrade pki-base-java | May 18, 2022 | Feb 9, 2022 |
| Redhat_linux | — | Upgrade pki-tools-debuginfoUpgrade ldapjdkUpgrade pki-core-debugsourceUpgrade python3-pkiUpgrade tomcatjssUpgrade jss-javadocUpgrade pki-baseUpgrade pki-symkey-debuginfoUpgrade pki-base-javaUpgrade ldapjdk-javadocUpgrade pki-caUpgrade jssUpgrade jss-debuginfoUpgrade pki-symkeyUpgrade pki-acmeUpgrade pki-toolsUpgrade pki-kraUpgrade jss-debugsourceUpgrade pki-core-debuginfoUpgrade pki-server | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade pki-toolsUpgrade jss-debuginfoUpgrade pki-symkeyUpgrade pki-symkey-debuginfoUpgrade jssUpgrade pki-core-debugsourceUpgrade pki-tools-debuginfoUpgrade jss-debugsourceUpgrade pki-core-debuginfoUpgrade jss-javadoc | Mar 5, 2024 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub