CVE-2021-25226

Katalog CVE

CVSS 5.5 · Medium EPSS 0,40%

Kerentanan Uncontrolled Resource Consumption pada trendmicro serverprotect. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan engine component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Rincian

Terbit di NVD

27 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://success.trendmicro.com/solution/000284207 patch · advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-21-087/ advisory pihak ketiga · vdb entry