PT-2019-9582 · Symantec · Sep Cloud+5

Published 2019-04-15 · Updated 2020-08-24 · CVE-2018-18366

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Symantec Norton Security versions prior to 22.16.3 SEP (Windows client) versions prior to 14.2 RU1 SEP (Windows client) version 12.1 RU6 MP9 and earlier SEP SBE versions prior to Cloud Agent 3.00.31.2817 NIS version 22.15.2.22 and earlier SEP version 12.1.7484.7002 and earlier SEP Cloud versions prior to 22.16.3

Description The issue is related to a kernel memory disclosure, where a specially crafted IRP request can cause the driver to return uninitialized memory.

Recommendations For Symantec Norton Security versions prior to 22.16.3, update to version 22.16.3 or later. For SEP (Windows client) versions prior to 14.2 RU1, update to version 14.2 RU1 or later. For SEP (Windows client) version 12.1 RU6 MP9 and earlier, update to a version later than 12.1 RU6 MP9. For SEP SBE versions prior to Cloud Agent 3.00.31.2817, update to Cloud Agent 3.00.31.2817 or later. For NIS version 22.15.2.22 and earlier, update to a version later than 22.15.2.22. For SEP version 12.1.7484.7002 and earlier, update to a version later than 12.1.7484.7002. For SEP Cloud versions prior to 22.16.3, update to version 22.16.3 or later.

Fix

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2018-18366

Affected Products

Nis

Sep

Sep Cloud

Sep Sbe

Symantec Endpoint Protection Client

Symantec Norton Security

References · 4

• https://osv.dev/vulnerability/CVE-2018-18366 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18366 · Security Note
• https://support.symantec.com/en_US/article.SYMSA1479.html · Vendor Advisory
• http://securityfocus.com/bid/107994 · Note