CVE-2021-25225

2021-01-2719:10:24

trendmicro

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.1%

JSON

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CNA Affected

[
  {
    "product": "Trend Micro ServerProtect for Linux",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "3.0"
      }
    ]
  }
]