Memory Exhaustion Vulnerability in Trend Micro ServerProtect for Linux

CVE-2021-25224

What is CVE-2021-25224?

A memory exhaustion issue exists within Trend Micro ServerProtect for Linux 3.0, originating from its manual scan component. This vulnerability allows a local attacker to create specific files aimed at exhausting system memory, potentially resulting in a denial-of-service scenario. To successfully exploit this flaw, an attacker must first execute low-privileged code on the target machine. Effective mitigation strategies should be employed to safeguard the affected systems.

References