A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ldapjdkUpgrade ldapjdk-javadocUpgrade tomcatjssUpgrade python3-pkiUpgrade jss-javadocUpgrade pki-base-javaUpgrade pki-kraUpgrade pki-acmeUpgrade pki-symkeyUpgrade pki-serverUpgrade jssUpgrade pki-caUpgrade pki-toolsUpgrade pki-base | May 13, 2022 | May 10, 2022 |
| Centos_linux | — | Upgrade pki-caUpgrade pki-core-debugsourceUpgrade pki-tools-debuginfoUpgrade pki-baseUpgrade jss-debugsourceUpgrade pki-kraUpgrade jssUpgrade pki-core-debuginfoUpgrade pki-serverUpgrade tomcatjssUpgrade jss-javadocUpgrade ldapjdkUpgrade ldapjdk-javadocUpgrade pki-acmeUpgrade pki-symkey-debuginfoUpgrade jss-debuginfoUpgrade pki-base-javaUpgrade python3-pkiUpgrade pki-toolsUpgrade pki-symkey | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade jss | Jul 30, 2024 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade pki-baseUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-acmeUpgrade pki-caUpgrade ldapjdk-javadocUpgrade jssUpgrade ldapjdkUpgrade pki-serverUpgrade jss-javadocUpgrade pki-kraUpgrade pki-base-javaUpgrade tomcatjssUpgrade python3-pki | May 18, 2022 | Feb 9, 2022 |
| Redhat_linux | — | Upgrade jssUpgrade pki-symkeyUpgrade pki-kraUpgrade pki-caUpgrade pki-acmeUpgrade pki-toolsUpgrade pki-core-debuginfoUpgrade pki-serverUpgrade jss-debugsourceUpgrade jss-debuginfoUpgrade pki-tools-debuginfoUpgrade pki-symkey-debuginfoUpgrade tomcatjssUpgrade jss-javadocUpgrade pki-baseUpgrade python3-pkiUpgrade pki-base-javaUpgrade ldapjdkUpgrade ldapjdk-javadocUpgrade pki-core-debugsource | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade jss-debuginfoUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-symkey-debuginfoUpgrade jss-javadocUpgrade jssUpgrade jss-debugsourceUpgrade pki-core-debugsourceUpgrade pki-core-debuginfoUpgrade pki-tools-debuginfo | Mar 5, 2024 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub