6.5

CVE-2018-18366

Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptible to a kernel memory disclosure, which is a type of issue where a specially crafted IRP request can cause the driver to return uninitialized memory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec ≫ Endpoint Protection Version 11.0 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update mr1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update mr2 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update mr3 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update mr4 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update mr4-mp2 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru5 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru6 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru6-mp1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru6-mp2 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru6-mp3 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru6a SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru7 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru7-mp1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru7-mp2 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru7-mp4 SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ru7-mp4a SwPlatform windows
Symantec ≫ Endpoint Protection Version 11.0 Update ry7-mp3 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru1-mp1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru2 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru2-mp1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru3 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru4 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru4-mp1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru4-mp1a SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru4-mp1b SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru4a SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru5 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru6 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru6-mp1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru6-mp10 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru6-mp2 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru6-mp3 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru6-mp4 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru6-mp5 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru6-mp6 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru6-mp7 SwPlatform windows
Symantec ≫ Endpoint Protection Version 12.1 Update ru6-mp8 SwPlatform windows
Symantec ≫ Endpoint Protection Version 14 SwPlatform windows
Symantec ≫ Endpoint Protection Version 14 Update mp1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 14.0.0 Update mp2 SwPlatform windows
Symantec ≫ Endpoint Protection Version 14.0.1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 14.0.1 Update mp1 SwPlatform windows
Symantec ≫ Endpoint Protection Version 14.0.1 Update mp2 SwPlatform windows
Symantec ≫ Endpoint Protection Version 14.2 SwPlatform windows
Symantec ≫ Endpoint Protection Version 14.2 Update mp1 SwPlatform windows
Symantec ≫ Endpoint Protection Version nis-22.15.2.22 SwEdition small_business
Symantec ≫ Endpoint Protection Version sep-12.1.7484.7002 SwEdition small_business
Symantec ≫ Endpoint Protection Cloud Version < 22.16.3
Symantec ≫ Endpoint Protection Cloud Agent SwEdition small_business Version < 3.00.31.2817
Symantec ≫ Norton Security SwPlatform windows Version < 22.16.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.302
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2 4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

https://support.symantec.com/en_US/article.SYMSA1479.html
Vendor Advisory
http://www.securityfocus.com/bid/107994
Third Party Advisory
VDB Entry