CVE-2021-25226

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan engine component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
References
Link Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-087/ Third Party Advisory VDB Entry
https://success.trendmicro.com/solution/000284207 Patch Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*

Information

Published : 2021-01-27 07:15

Updated : 2021-02-01 06:33


NVD link : CVE-2021-25226

Mitre link : CVE-2021-25226

Products Affected
CWE