CVE-2021-4213

CVE Details

Release Date:	2022-08-24
Impact:	None	What is this?

Description

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server's RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.

See more information about CVE-2021-4213 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 metrics

Base Score:	7.5
Vector String:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Version:	3.0
Attack Vector:	Network
Attack Complexity:	Low
Privileges Required:	None
User Interaction:	None
Scope:	Unchanged
Confidentiality Impact:	None
Integrity Impact:	None
Availability Impact:	High

Errata information

Platform	Errata	Release Date
Oracle Linux version 8 (jss)	ELSA-2022-1851	2022-05-17
Oracle Linux version 8 (ldapjdk)	ELSA-2022-1851	2022-05-17
Oracle Linux version 8 (pki-core)	ELSA-2022-1851	2022-05-17
Oracle Linux version 8 (tomcatjss)	ELSA-2022-1851	2022-05-17