CVE-2021-25225

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Date published : 2021-01-27

https://success.trendmicro.com/solution/000284207

https://www.zerodayinitiative.com/advisories/ZDI-21-086/