A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pki-kraUpgrade ldapjdkUpgrade pki-acmeUpgrade jss-javadocUpgrade pki-base-javaUpgrade python3-pkiUpgrade tomcatjssUpgrade ldapjdk-javadocUpgrade pki-serverUpgrade pki-caUpgrade pki-baseUpgrade jssUpgrade pki-symkeyUpgrade pki-tools | May 13, 2022 | May 10, 2022 |
| Centos_linux | — | Upgrade pki-caUpgrade pki-kraUpgrade pki-serverUpgrade pki-core-debuginfoUpgrade pki-tools-debuginfoUpgrade pki-core-debugsourceUpgrade pki-baseUpgrade jss-debugsourceUpgrade jssUpgrade pki-acmeUpgrade pki-symkey-debuginfoUpgrade jss-debuginfoUpgrade ldapjdkUpgrade ldapjdk-javadocUpgrade pki-toolsUpgrade python3-pkiUpgrade pki-symkeyUpgrade tomcatjssUpgrade pki-base-javaUpgrade jss-javadoc | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade jss | Jul 30, 2024 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade pki-baseUpgrade ldapjdk-javadocUpgrade pki-toolsUpgrade jssUpgrade pki-symkeyUpgrade pki-caUpgrade pki-acmeUpgrade pki-serverUpgrade jss-javadocUpgrade tomcatjssUpgrade pki-base-javaUpgrade pki-kraUpgrade python3-pkiUpgrade ldapjdk | May 18, 2022 | Feb 9, 2022 |
| Redhat_linux | — | Upgrade python3-pkiUpgrade pki-baseUpgrade ldapjdkUpgrade pki-tools-debuginfoUpgrade ldapjdk-javadocUpgrade jss-javadocUpgrade pki-core-debugsourceUpgrade tomcatjssUpgrade pki-symkey-debuginfoUpgrade pki-base-javaUpgrade pki-acmeUpgrade pki-serverUpgrade jssUpgrade pki-kraUpgrade jss-debugsourceUpgrade pki-symkeyUpgrade pki-toolsUpgrade jss-debuginfoUpgrade pki-core-debuginfoUpgrade pki-ca | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade jss-debuginfoUpgrade pki-symkeyUpgrade pki-symkey-debuginfoUpgrade pki-toolsUpgrade pki-core-debuginfoUpgrade jss-javadocUpgrade jss-debugsourceUpgrade pki-core-debugsourceUpgrade pki-tools-debuginfoUpgrade jss | Mar 5, 2024 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub