CVE-2021-25224

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Score

CVSS 3.1 5.5 Medium

Status

Modified - security@trendmicro.com

Published

2021-01-27

Last modified

2024-08-03

Weaknesses

CWE-400

Affected products

• Trend Micro Serverprotect For Linux (Trend Micro)
• Serverprotect (Trendmicro)

References

• https://success.trendmicro.com/solution/000284207
• https://www.zerodayinitiative.com/advisories/ZDI-21-085/