Lucene search

K
nvd[email protected]NVD:CVE-2021-4213
HistoryAug 24, 2022 - 4:15 p.m.

CVE-2021-4213

2022-08-2416:15:09
CWE-401
web.nvd.nist.gov
1

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.004 Low

EPSS

Percentile

73.8%

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.

Affected configurations

NVD
Node
dogtagpkinetwork_security_services_for_javaRange<4.9.3
OR
dogtagpkinetwork_security_services_for_javaRange5.0.05.1.0
Node
redhatenterprise_linuxMatch8.0
Node
debiandebian_linuxMatch10.0
OR
debiandebian_linuxMatch11.0

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.004 Low

EPSS

Percentile

73.8%