High severity7.5NVD Advisory· Published Aug 24, 2022· Updated Jun 17, 2026

CVE-2021-4213

Description

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dogtag/Network Security Services For Java
cpe:2.3:a:dogtagpki:network_security_services_for_java:*:*:*:*:*:*:*:*
Range: <4.9.3
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Dogtag/Jssllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: Fixed in v5.2.0-beta1
osv-coords14 versions
pkg:rpm/almalinux/jss pkg:rpm/almalinux/jss-javadoc pkg:rpm/almalinux/ldapjdk pkg:rpm/almalinux/ldapjdk-javadoc pkg:rpm/almalinux/pki-acme pkg:rpm/almalinux/pki-base pkg:rpm/almalinux/pki-base-java pkg:rpm/almalinux/pki-ca pkg:rpm/almalinux/pki-kra pkg:rpm/almalinux/pki-server pkg:rpm/almalinux/pki-symkey pkg:rpm/almalinux/pki-tools pkg:rpm/almalinux/python3-pki pkg:rpm/almalinux/tomcatjss
< 4.9.3-1.module_el8.6.0+2764+9fc58d50+ 13 more
- (no CPE)range: < 4.9.3-1.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 4.9.3-1.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 4.23.0-1.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 4.23.0-1.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 10.12.0-2.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 10.12.0-2.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 10.12.0-2.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 10.12.0-2.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 10.12.0-2.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 10.12.0-2.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 10.12.0-2.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 10.12.0-2.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 10.12.0-2.module_el8.6.0+2764+9fc58d50
- (no CPE)range: < 7.7.1-1.module_el8.6.0+2764+9fc58d50

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
github.com/dogtagpki/jss/commit/3aabe0e9d59b0a42e68ac8cd0468f9c5179967d2nvdPatchThird Party Advisory
github.com/dogtagpki/jss/commit/5922560a78d0dee61af8a33cc9cfbf4cfa291448nvdPatchThird Party Advisory
access.redhat.com/security/cve/CVE-2021-4213nvdThird Party Advisory
security-tracker.debian.org/tracker/CVE-2021-4213nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000