CVE-2020-28575: trend micro trend micro serverprotect for linux Out-of-bounds Write

Vulnerability summary

CVE-2020-28575 is a medium (CVSS 6.7) Out-of-bounds Write vulnerability in trend micro trend micro serverprotect for linux. EPSS estimates a 0.67% chance of exploitation in the next 30 days, higher than 51.2% of scored vulnerabilities.

Timeline

1. 01-12-2020
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this vulnerability.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.