DEBIAN-CVE-2021-4213

Source
https://security-tracker.debian.org/tracker/CVE-2021-4213
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-4213.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2021-4213
Upstream
Published
2022-08-24T16:15:09Z
Modified
2026-09-01T20:04:33Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.

References

Affected packages

Debian:12 / jss

Package

Name
jss
Purl
pkg:deb/debian/jss?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-4213.json"

Debian:14 / jss

Package

Name
jss
Purl
pkg:deb/debian/jss?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.0-1

Affected versions

4.*
4.3.1-4
4.3.1-5
4.3.1-6
4.3.1-7
4.4.2-1
4.4.2-2
4.4.2-3
4.4.2-4
4.4.2-5
4.4.2-6
4.4.3-1
4.4.4-1
4.5.0~a4-1
4.5.0-1
4.5.1-1
4.5.3-1
4.5.3-2
4.6.0-1
4.6.1-1
4.6.1-2
4.6.1-3
4.6.2-1
4.6.3-1
4.7.0~b1-1
4.7.0~b4-1
4.7.0~b4-2
4.7.0-1
4.7.1-1
4.7.2-1
4.7.3-1
4.8.0-1
4.8.0-2
4.9.1-1
5.*
5.0.0-1
5.1.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-4213.json"