CVE-2021-25225

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
References
Link Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-086/ Third Party Advisory VDB Entry
https://success.trendmicro.com/solution/000284207 Patch Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*

Information

Published : 2021-01-27 11:15

Updated : 2021-02-01 11:02


NVD link : CVE-2021-25225

Mitre link : CVE-2021-25225


JSON object : View

CWE
CWE-400

Uncontrolled Resource Consumption

Advertisement

dedicated server usa

Products Affected

trendmicro

  • serverprotect