CVE-2022-4132
Fixed in a distro release EPSS <1%CVSS 5.9
A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if configured that way (repeatedly hitting the login page).
Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat JBoss Web Server 3, Red Hat JBoss Web Server 5, Fedora Extra Packages for Enterprise Linux, Fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | jss | no fix |
| Debian 14 | jss | 5.5.0-1 |
| Ubuntu 22.04 LTS | tomcat9 | no fix |
| Ubuntu 24.04 LTS | tomcat9 | no fix |
| Ubuntu 25.04 | tomcat9 | no fix |
| Ubuntu Pro 14.04 LTS | tomcat6 | no fix |
| Ubuntu Pro 14.04 LTS | tomcat7 | no fix |
| Ubuntu Pro 16.04 LTS | tomcat6 | no fix |
| Ubuntu Pro 16.04 LTS | tomcat7 | no fix |
| Ubuntu Pro 16.04 LTS | tomcat8 | no fix |
| Ubuntu Pro 18.04 LTS | tomcat7 | no fix |
| Ubuntu Pro 18.04 LTS | tomcat8 | no fix |
| Ubuntu Pro 18.04 LTS | tomcat9 | no fix |
| Ubuntu Pro 20.04 LTS | tomcat9 | no fix |