https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:17:37 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:1851 <p><strong>Affected:</strong> AlmaLinux:8: jss, AlmaLinux:8: jss-javadoc, AlmaLinux:8: ldapjdk, AlmaLinux:8: ldapjdk-javadoc, AlmaLinux:8: pki-acme, AlmaLinux:8: pki-base, AlmaLinux:8: pki-base-java, AlmaLinux:8: pki-ca, AlmaLinux:8: pki-kra, AlmaLinux:8: pki-server and 4 more</p> <p>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.</p> <p>Security Fix(es):</p> <p>* JSS: memory leak in TLS connection leads to OOM (CVE-2021-4213)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: jss, AlmaLinux:8: jss-javadoc, AlmaLinux:8: ldapjdk, AlmaLinux:8: ldapjdk-javadoc, AlmaLinux:8: pki-acme, AlmaLinux:8: pki-base, AlmaLinux:8: pki-base-java, AlmaLinux:8: pki-ca, AlmaLinux:8: pki-kra, AlmaLinux:8: pki-server and 4 more</p> <p>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.</p> <p>Security Fix(es):</p> <p>* JSS: memory leak in TLS connection leads to OOM (CVE-2021-4213)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:1851 https://cve.radiocsirt.org/vuln/euvd-2026-21364 EUVD-2026-21364 https://cve.radiocsirt.org/vuln/euvd-2026-21364 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4213 <p>A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.</p> <p>A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-4213 https://cve.radiocsirt.org/vuln/ghsa-727r-5fr6-wjfp <p>A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.</p> <p>A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-727r-5fr6-wjfp https://cve.radiocsirt.org/vuln/gsd-2021-4213 gsd-2021-4213 https://cve.radiocsirt.org/vuln/gsd-2021-4213 https://cve.radiocsirt.org/vuln/oesa-2024-1208 <p><strong>Affected:</strong> openEuler:22.03-LTS: jss</p> <p>JSS offers a implementation for java-based applications to use native NSS. Security Fix(es): A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.(CVE-2021-4213)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: jss</p> <p>JSS offers a implementation for java-based applications to use native NSS. Security Fix(es): A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.(CVE-2021-4213)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1208 https://cve.radiocsirt.org/vuln/rhsa-2022:1851 <p>JSS: memory leak in TLS connection leads to OOM</p> <p>JSS: memory leak in TLS connection leads to OOM</p> https://cve.radiocsirt.org/vuln/rhsa-2022:1851 https://cve.radiocsirt.org/vuln/rhsa-2024:0774 <p>JSS: memory leak in TLS connection leads to OOM</p> <p>JSS: memory leak in TLS connection leads to OOM</p> https://cve.radiocsirt.org/vuln/rhsa-2024:0774 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-4213 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: jss, Ubuntu:18.04:LTS: jss, Ubuntu:20.04:LTS: jss, Ubuntu:22.04:LTS: jss, Ubuntu:24.04:LTS: jss, Ubuntu:25.10: jss, Ubuntu:26.04:LTS: jss</p> <p>A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: jss, Ubuntu:18.04:LTS: jss, Ubuntu:20.04:LTS: jss, Ubuntu:22.04:LTS: jss, Ubuntu:24.04:LTS: jss, Ubuntu:25.10: jss, Ubuntu:26.04:LTS: jss</p> <p>A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-4213 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0352 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der PKI-Core Komponente ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der PKI-Core Komponente ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0352