Cyber Resilience

CVE-2021-4213

High

Published: 24 August 2022

Published
24 August 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0024 47.1th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-4213 is a high-severity Missing Release of Memory after Effective Lifetime (CWE-401) vulnerability in Dogtagpki Network Security Services For Java. Its CVSS base score is 7.5 (High).

Operationally, ranked at the 47.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of…

more

an out-of-memory process, causing a denial of service.

CWE(s)
CWE-401

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

dogtagpki
network security services for java
≤ 4.9.3 · 5.0.0 — 5.1.0
redhat
enterprise linux
8.0
debian
debian linux
10.0, 11.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References