Memory Exhaustion Vulnerability in Trend Micro ServerProtect for Linux

CVE-2021-25225

What is CVE-2021-25225?

A memory exhaustion vulnerability exists in Trend Micro ServerProtect for Linux 3.0, which could be exploited by a local attacker through the creation of specific files. This flaw resides within a scheduled scan component of the software, which, when manipulated, can lead to a denial-of-service scenario. To exploit this vulnerability, the attacker must gain the ability to execute low-privileged code on the compromised system.

References