CVE-2018-18366
25.04.2019, 20:29
Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptible to a kernel memory disclosure, which is a type of issue where a specially crafted IRP request can cause the driver to return uninitialized memory.Enginsight
| Vendor | Product | Version |
|---|---|---|
| symantec | endpoint_protection | 11.0 |
| symantec | endpoint_protection | 11.0:mr1 |
| symantec | endpoint_protection | 11.0:mr2 |
| symantec | endpoint_protection | 11.0:mr3 |
| symantec | endpoint_protection | 11.0:mr4 |
| symantec | endpoint_protection | 11.0:mr4-mp2 |
| symantec | endpoint_protection | 11.0:ru5 |
| symantec | endpoint_protection | 11.0:ru6 |
| symantec | endpoint_protection | 11.0:ru6-mp1 |
| symantec | endpoint_protection | 11.0:ru6-mp2 |
| symantec | endpoint_protection | 11.0:ru6-mp3 |
| symantec | endpoint_protection | 11.0:ru6a |
| symantec | endpoint_protection | 11.0:ru7 |
| symantec | endpoint_protection | 11.0:ru7-mp1 |
| symantec | endpoint_protection | 11.0:ru7-mp2 |
| symantec | endpoint_protection | 11.0:ru7-mp4 |
| symantec | endpoint_protection | 11.0:ru7-mp4a |
| symantec | endpoint_protection | 11.0:ry7-mp3 |
| symantec | endpoint_protection | 12.1 |
| symantec | endpoint_protection | 12.1:ru1 |
| symantec | endpoint_protection | 12.1:ru1-mp1 |
| symantec | endpoint_protection | 12.1:ru2 |
| symantec | endpoint_protection | 12.1:ru2-mp1 |
| symantec | endpoint_protection | 12.1:ru3 |
| symantec | endpoint_protection | 12.1:ru4 |
| symantec | endpoint_protection | 12.1:ru4-mp1 |
| symantec | endpoint_protection | 12.1:ru4-mp1a |
| symantec | endpoint_protection | 12.1:ru4-mp1b |
| symantec | endpoint_protection | 12.1:ru4a |
| symantec | endpoint_protection | 12.1:ru5 |
| symantec | endpoint_protection | 12.1:ru6 |
| symantec | endpoint_protection | 12.1:ru6-mp1 |
| symantec | endpoint_protection | 12.1:ru6-mp10 |
| symantec | endpoint_protection | 12.1:ru6-mp2 |
| symantec | endpoint_protection | 12.1:ru6-mp3 |
| symantec | endpoint_protection | 12.1:ru6-mp4 |
| symantec | endpoint_protection | 12.1:ru6-mp5 |
| symantec | endpoint_protection | 12.1:ru6-mp6 |
| symantec | endpoint_protection | 12.1:ru6-mp7 |
| symantec | endpoint_protection | 12.1:ru6-mp8 |
| symantec | endpoint_protection | 14.0.0:mp2 |
| symantec | endpoint_protection | 14.0.1 |
| symantec | endpoint_protection | 14.0.1:mp1 |
| symantec | endpoint_protection | 14.0.1:mp2 |
| symantec | endpoint_protection | 14.2 |
| symantec | endpoint_protection | 14.2:mp1 |
| symantec | endpoint_protection_cloud | 𝑥 < 22.16.3 |
| symantec | endpoint_protection_cloud_agent | 𝑥 < 3.00.31.2817 |
| symantec | norton_security | 𝑥 < 22.16.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration