CVE-2018-18366
Medium
Description
Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptible to a kernel memory disclosure, which is a type of issue where a specially crafted IRP request can cause the driver to return uninitialized memory.
SeverityMedium
CVSS6.5
Exploit probability—
ProductSymantec Norton Security
PublishedApr 25, 2019
First seenApr 25, 2019
How to fix
Update
- symantec norton_security22.16.3 or later
- symantec endpoint_protection_cloud22.16.3 or later
- symantec endpoint_protection_cloud_agent3.00.31.2817 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec norton_security | v < 22.16.3 | 22.16.3 |
| symantec endpoint_protection | 11.0, 12.1, 14, 14.0.0, 14.0.1, 14.2, nis-22.15.2.22, sep-12.1.7484.7002 | — |
| symantec endpoint_protection_cloud | v < 22.16.3 | 22.16.3 |
| symantec endpoint_protection_cloud_agent | v < 3.00.31.2817 | 3.00.31.2817 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.