CVE-2021-25224 A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specif...
MediumCVSS 5.5
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro serverprotect | = 3.0 | No fix listed |
| Trend Micro ServerProtect for Linux | = 3.0 | No fix listed |
References
- success.trendmicro.com patch vendor-advisory
- www.zerodayinitiative.com third-party-advisory vdb-entry