The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tomcatjssUpgrade ldapjdkUpgrade pki-base-javaUpgrade ldapjdk-javadocUpgrade pki-acmeUpgrade python3-pkiUpgrade jss-javadocUpgrade pki-kraUpgrade pki-caUpgrade pki-toolsUpgrade jssUpgrade pki-baseUpgrade pki-serverUpgrade pki-symkey | May 13, 2022 | May 10, 2022 |
| Centos_linux | — | Upgrade pki-base-javaUpgrade tomcatjssUpgrade jss-javadocUpgrade jss-debuginfoUpgrade ldapjdk-javadocUpgrade python3-pkiUpgrade pki-symkeyUpgrade ldapjdkUpgrade pki-acmeUpgrade pki-toolsUpgrade pki-symkey-debuginfoUpgrade pki-core-debugsourceUpgrade jssUpgrade pki-tools-debuginfoUpgrade pki-caUpgrade pki-serverUpgrade pki-kraUpgrade pki-core-debuginfoUpgrade jss-debugsourceUpgrade pki-base | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade jss | Jul 30, 2024 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade jss-javadocUpgrade tomcatjssUpgrade python3-pkiUpgrade pki-serverUpgrade pki-base-javaUpgrade pki-kraUpgrade ldapjdkUpgrade pki-acmeUpgrade pki-symkeyUpgrade ldapjdk-javadocUpgrade pki-toolsUpgrade pki-baseUpgrade pki-caUpgrade jss | May 18, 2022 | Feb 9, 2022 |
| Redhat_linux | — | Upgrade pki-caUpgrade pki-serverUpgrade jss-debugsourceUpgrade pki-core-debuginfoUpgrade jssUpgrade pki-kraUpgrade pki-acmeUpgrade jss-debuginfoUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-symkey-debuginfoUpgrade pki-tools-debuginfoUpgrade pki-core-debugsourceUpgrade tomcatjssUpgrade python3-pkiUpgrade pki-baseUpgrade jss-javadocUpgrade ldapjdkUpgrade ldapjdk-javadocUpgrade pki-base-java | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade pki-symkeyUpgrade jss-debuginfoUpgrade pki-symkey-debuginfoUpgrade pki-toolsUpgrade jss-debugsourceUpgrade jss-javadocUpgrade pki-core-debuginfoUpgrade pki-tools-debuginfoUpgrade pki-core-debugsourceUpgrade jss | Mar 5, 2024 | Aug 24, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub