CVE-2021-25224

2021-01-2719:10:24

trendmicro

www.cve.org

memory exhaustion

trend micro

serverprotect

linux

denial-of-service

vulnerability

local attacker

specific files

manual scan

low-privileged code

AI Score

5.8

Confidence

High

EPSS

Percentile

15.9%

JSON

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CNA Affected

[
  {
    "product": "Trend Micro ServerProtect for Linux",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "3.0"
      }
    ]
  }
]