CVE-2021-25224

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
References
Link Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-085/ Third Party Advisory VDB Entry
https://success.trendmicro.com/solution/000284207 Patch Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*

Information

Published : 2021-01-27 11:15

Updated : 2021-02-01 11:20


NVD link : CVE-2021-25224

Mitre link : CVE-2021-25224


JSON object : View

CWE
CWE-400

Uncontrolled Resource Consumption

Advertisement

dedicated server usa

Products Affected

trendmicro

  • serverprotect