# CVE-2021-4213: jss: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.  Secur...

CVE-2021-4213 is fixed in 15 products on 1 platform, first by RHSA-2022:1851, released May 10, 2022. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2021-4213
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0174
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 10, 2022

## Description

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.  Security Fix(es):  * JSS: memory leak in TLS connection leads to OOM (CVE-2021-4213)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | jss Debian 12.15 (bookworm) | 5.2.0-1 | [DEBIAN-CVE-2021-4213](https://patchblox.com/security/data/fix/linux/debian-cve-2021-4213.md) | Aug 24, 2022 |
| Linux | jss Debian 14 | 5.2.0-1 | [DEBIAN-CVE-2021-4213](https://patchblox.com/security/data/fix/linux/debian-cve-2021-4213.md) | Aug 24, 2022 |
| Linux | jss RHEL 8 | 0:4.9.3-1.module+el8.6.0+14244+60d461b7 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | jss almalinux 8 | 4.9.3-1.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | jss ol 8 | 0:4.9.3-1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | jss rocky 8 | 0:4.9.3-1.module+el8.6.0+788+76246f77 | [RLSA-2022:1851](https://patchblox.com/security/data/fix/linux/rlsa-2022-1851.md) | May 10, 2022 |
| Linux | jss-javadoc RHEL 8 | 0:4.9.3-1.module+el8.6.0+14244+60d461b7 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | jss-javadoc almalinux 8 | 4.9.3-1.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | jss-javadoc ol 8 | 0:4.9.3-1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | ldapjdk RHEL 8 | 0:4.23.0-1.module+el8.5.0+11983+6ba118b4 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | ldapjdk almalinux 8 | 4.23.0-1.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | ldapjdk ol 8 | 0:4.23.0-1.module+el8.5.0+20349+9cc212a8 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | ldapjdk rocky 8 | 0:4.23.0-1.module+el8.7.0+1069+6f3de942 | [RLSA-2022:1851](https://patchblox.com/security/data/fix/linux/rlsa-2022-1851.md) | May 10, 2022 |
| Linux | ldapjdk-javadoc RHEL 8 | 0:4.23.0-1.module+el8.5.0+11983+6ba118b4 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | ldapjdk-javadoc almalinux 8 | 4.23.0-1.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | ldapjdk-javadoc ol 8 | 0:4.23.0-1.module+el8.5.0+20349+9cc212a8 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | pki-acme RHEL 8 | 0:10.12.0-2.module+el8.6.0+14115+8b467244 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-acme almalinux 8 | 10.12.0-2.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-acme ol 8 | 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | pki-base RHEL 8 | 0:10.12.0-2.module+el8.6.0+14115+8b467244 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-base almalinux 8 | 10.12.0-2.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-base ol 8 | 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | pki-base-java RHEL 8 | 0:10.12.0-2.module+el8.6.0+14115+8b467244 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-base-java almalinux 8 | 10.12.0-2.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-base-java ol 8 | 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | pki-ca RHEL 8 | 0:10.12.0-2.module+el8.6.0+14115+8b467244 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-ca almalinux 8 | 10.12.0-2.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-ca ol 8 | 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | pki-core rocky 8 | 0:10.12.0-2.module+el8.6.0+788+76246f77 | [RLSA-2022:1851](https://patchblox.com/security/data/fix/linux/rlsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-kra RHEL 8 | 0:10.12.0-2.module+el8.6.0+14115+8b467244 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-kra almalinux 8 | 10.12.0-2.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-kra ol 8 | 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | pki-server RHEL 8 | 0:10.12.0-2.module+el8.6.0+14115+8b467244 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-server almalinux 8 | 10.12.0-2.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-server ol 8 | 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | pki-symkey RHEL 8 | 0:10.12.0-2.module+el8.6.0+14115+8b467244 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-symkey almalinux 8 | 10.12.0-2.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-symkey ol 8 | 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | pki-tools RHEL 8 | 0:10.12.0-2.module+el8.6.0+14115+8b467244 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-tools almalinux 8 | 10.12.0-2.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | pki-tools ol 8 | 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | python3-pki RHEL 8 | 0:10.12.0-2.module+el8.6.0+14115+8b467244 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | python3-pki almalinux 8 | 10.12.0-2.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | python3-pki ol 8 | 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | tomcatjss RHEL 8 | 0:7.7.1-1.module+el8.6.0+13291+248751b1 | [RHSA-2022:1851](https://patchblox.com/security/data/fix/linux/rhsa-2022-1851.md) | May 10, 2022 |
| Linux | tomcatjss almalinux 8 | 7.7.1-1.module_el8.6.0+2764+9fc58d50 | [ALSA-2022:1851](https://patchblox.com/security/data/fix/linux/alsa-2022-1851.md) | May 10, 2022 |
| Linux | tomcatjss ol 8 | 0:7.7.1-1.module+el8.6.0+20558+60d461b7 | [ELSA-2022-1851](https://patchblox.com/security/data/fix/linux/elsa-2022-1851.md) | May 17, 2022 |
| Linux | tomcatjss rocky 8 | 0:7.7.1-1.module+el8.6.0+788+76246f77 | [RLSA-2022:1851](https://patchblox.com/security/data/fix/linux/rlsa-2022-1851.md) | May 10, 2022 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
