Vulnerability · Published Jan 27, 2021 · Assigned by trendmicro
CVE-2021-25224
Medium 5.5
In plain English
A medium-severity security flaw in Trend Micro ServerProtect for Linux from Trend Micro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.4%top 64.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Trend Micro ServerProtect for Linux | 3.0 |
References
- https://success.trendmicro.com/solution/000284207 x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-21-085/ x_refsource_MISC