https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T15:17:38.402445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1851 ALSA-2022:1851 — Moderate: pki-core:10.6 security and bug fix update 2026-10-09T15:17:38.410503+00:00

Affected: AlmaLinux:8: jss, AlmaLinux:8: jss-javadoc, AlmaLinux:8: ldapjdk, AlmaLinux:8: ldapjdk-javadoc, AlmaLinux:8: pki-acme, AlmaLinux:8: pki-base, AlmaLinux:8: pki-base-java, AlmaLinux:8: pki-ca, AlmaLinux:8: pki-kra, AlmaLinux:8: pki-server and 4 more

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

* JSS: memory leak in TLS connection leads to OOM (CVE-2021-4213)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-21364 EUVD-2026-21364 2026-10-09T15:17:38.410571+00:00 EUVD-2026-21364 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4213 fkie_cve-2021-4213 2026-10-09T15:17:38.410588+00:00

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-727r-5fr6-wjfp GHSA-727r-5fr6-wjfp 2026-10-09T15:17:38.410612+00:00

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2021-4213 gsd-2021-4213 2026-10-09T15:17:38.410628+00:00 gsd-2021-4213 https://cve.radiocsirt.org/vuln/oesa-2024-1208 OESA-2024-1208 — jss security update 2026-10-09T15:17:38.410639+00:00

Affected: openEuler:22.03-LTS: jss

JSS offers a implementation for java-based applications to use native NSS. Security Fix(es): A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.(CVE-2021-4213)

 https://cve.radiocsirt.org/vuln/rhsa-2022:1851 RHSA-2022:1851 — Red Hat Security Advisory: pki-core:10.6 security and bug fix update 2026-10-09T15:17:38.410660+00:00

JSS: memory leak in TLS connection leads to OOM

 https://cve.radiocsirt.org/vuln/rhsa-2024:0774 RHSA-2024:0774 — Red Hat Security Advisory: Red Hat Certificate System 10.4 for RHEL 8 security and bug fix update 2026-10-09T15:17:38.410676+00:00

JSS: memory leak in TLS connection leads to OOM

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-4213 UBUNTU-CVE-2021-4213 2026-10-09T15:17:38.410690+00:00

Affected: Ubuntu:16.04:LTS: jss, Ubuntu:18.04:LTS: jss, Ubuntu:20.04:LTS: jss, Ubuntu:22.04:LTS: jss, Ubuntu:24.04:LTS: jss, Ubuntu:25.10: jss, Ubuntu:26.04:LTS: jss

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0352 WID-SEC-W-2024-0352 — Red Hat Enterprise Linux (DogTag PKI): Schwachstelle ermöglicht Denial of Service 2026-10-09T15:17:38.410716+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der PKI-Core Komponente ausnutzen, um einen Denial of Service Angriff durchzuführen.