CVE & CISA-KEV CatalogNVD
CVE-2021-4213
HIGH7.5
CVSS v3
Description
A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.
How to fix
Remediation Available
jssDebian
Fixed in:5.2.0-1CVE-2021-4213
Fixed in:5.2.0-1CVE-2021-4213
idm-console-framework-0:1.3.0Red Hat / RHEL
Fixed in:1.module+el8pki+14677+1ef79a68.noarch::redhat-pki:10RHSA-2024:0774
Fixed in:1.module+el8pki+14677+1ef79a68.src::redhat-pki:10RHSA-2024:0774
idm-console-framework-0:1.3.0Rocky
Fixed in:1.module+el8pki+14677+1ef79a68.src::redhat-pki:10RHSA-2024:0774
Fixed in:1.module+el8pki+14677+1ef79a68.noarch::redhat-pki:10RHSA-2024:0774
jss-0:4.9.8Rocky
Fixed in:1.module+el8pki+19895+c800dfbd.src::redhat-pki:10RHSA-2024:0774
Fixed in:1.module+el8pki+19895+c800dfbd.x86_64::redhat-pki:10RHSA-2024:0774
jss-0:4.9.8Red Hat / RHEL
Fixed in:1.module+el8pki+19895+c800dfbd.src::redhat-pki:10RHSA-2024:0774
Fixed in:1.module+el8pki+19895+c800dfbd.x86_64::redhat-pki:10RHSA-2024:0774
jss-debuginfo-0:4.9.8Red Hat / RHEL
Fixed in:1.module+el8pki+19895+c800dfbd.x86_64::redhat-pki:10RHSA-2024:0774
jss-debuginfo-0:4.9.8Rocky
Fixed in:1.module+el8pki+19895+c800dfbd.x86_64::redhat-pki:10RHSA-2024:0774
jss-debugsource-0:4.9.8Red Hat / RHEL
Fixed in:1.module+el8pki+19895+c800dfbd.x86_64::redhat-pki:10RHSA-2024:0774
jss-debugsource-0:4.9.8Rocky
Fixed in:1.module+el8pki+19895+c800dfbd.x86_64::redhat-pki:10RHSA-2024:0774
jss-javadoc-0:4.9.8Rocky
Fixed in:1.module+el8pki+19895+c800dfbd.x86_64::redhat-pki:10RHSA-2024:0774
jss-javadoc-0:4.9.8Red Hat / RHEL
Fixed in:1.module+el8pki+19895+c800dfbd.x86_64::redhat-pki:10RHSA-2024:0774
ldapjdk-0:4.23.0Rocky
Fixed in:1.module+el8pki+14677+1ef79a68.noarch::redhat-pki:10RHSA-2024:0774
Fixed in:1.module+el8pki+14677+1ef79a68.src::redhat-pki:10RHSA-2024:0774
ldapjdk-0:4.23.0Red Hat / RHEL
Fixed in:1.module+el8pki+14677+1ef79a68.noarch::redhat-pki:10RHSA-2024:0774
Fixed in:1.module+el8pki+14677+1ef79a68.src::redhat-pki:10RHSA-2024:0774
ldapjdk-javadoc-0:4.23.0Rocky
Fixed in:1.module+el8pki+14677+1ef79a68.noarch::redhat-pki:10RHSA-2024:0774
ldapjdk-javadoc-0:4.23.0Red Hat / RHEL
Fixed in:1.module+el8pki+14677+1ef79a68.noarch::redhat-pki:10RHSA-2024:0774
python3-redhat-pki-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
python3-redhat-pki-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
Fixed in:5.module+el8pki+21062+4ed906e8.src::redhat-pki:10RHSA-2024:0774
redhat-pki-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.src::redhat-pki:10RHSA-2024:0774
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-acme-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-acme-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-base-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-base-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-base-java-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-base-java-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-ca-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-ca-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-console-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-console-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-console-theme-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-console-theme-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-debuginfo-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-debuginfo-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-debugsource-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-debugsource-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-est-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-est-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-javadoc-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-javadoc-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-kra-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-kra-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-ocsp-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-ocsp-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-server-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-server-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-server-theme-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-server-theme-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-symkey-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-symkey-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-symkey-debuginfo-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-symkey-debuginfo-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-tks-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-tks-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.noarch::redhat-pki:10RHSA-2024:0774
redhat-pki-tools-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-tools-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-tools-debuginfo-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-tools-debuginfo-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-tps-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-tps-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-tps-debuginfo-0:10.13.9Rocky
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
redhat-pki-tps-debuginfo-0:10.13.9Red Hat / RHEL
Fixed in:5.module+el8pki+21062+4ed906e8.x86_64::redhat-pki:10RHSA-2024:0774
tomcatjss-0:7.7.3Rocky
Fixed in:1.module+el8pki+19895+c800dfbd.noarch::redhat-pki:10RHSA-2024:0774
Fixed in:1.module+el8pki+19895+c800dfbd.src::redhat-pki:10RHSA-2024:0774
tomcatjss-0:7.7.3Red Hat / RHEL
Fixed in:1.module+el8pki+19895+c800dfbd.src::redhat-pki:10RHSA-2024:0774
Fixed in:1.module+el8pki+19895+c800dfbd.noarch::redhat-pki:10RHSA-2024:0774
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploit Intelligence
1.20%probability of exploitation in 30 days
64thpercentile
Moderate risk: more likely to be exploited than 64% of all known CVEs.
References
Third-Party Advisory2
Related Vulnerabilities
Other CWE-401 (Missing Release of Memory (Memory Leak)) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2020-13934 | High | 7.5 | 64% | - | Fix |
| CVE-2016-6304 | High | 7.5 | 63% | - | Fix |
| CVE-2019-12265 | Medium | 5.3 | 55% | - | Fix |
| CVE-2001-0136 | Medium | 5.0 | 45% | - | - |
| CVE-2016-4232 | High | 7.5 | 36% | - | - |
| CVE-2001-0543 | Medium | 5.0 | 21% | - | - |
Embed a live status badge for CVE-2021-4213
Markdown
[](https://tridentstack.com/cve/CVE-2021-4213)HTML
<a href="https://tridentstack.com/cve/CVE-2021-4213"><img src="https://tridentstack.com/cve/badge/CVE-2021-4213.svg" alt="CVE-2021-4213"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.