CVE-2021-25224: Trend Micro ServerProtect splx_manual_scan Memory Exhaustion Denial-Of-Service Vulnerability
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro ServerProtect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the splxmanualscan executable. The issue results from the lack of proper validation of user-supplied data, which can result in a memory exhaustion condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2021-25224.
What is the title of this vulnerability?
The title of this vulnerability is Trend Micro ServerProtect splx_manual_scan Memory Exhaustion Denial-Of-Service Vulnerability.
How can this vulnerability be exploited?
This vulnerability can be exploited by local attackers who can create a denial-of-service condition by having the target visit a malicious page or open a malicious file.
What is the severity of CVE-2021-25224?
The severity of CVE-2021-25224 is medium, with a severity value of 5.5.
How can I fix the vulnerability CVE-2021-25224?
To fix CVE-2021-25224, it is recommended to apply the appropriate patch or update provided by Trend Micro.