CVE-2020-5826

Published: Feb 11, 2020Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.

Affected (77)

Products: Symantec: Endpoint Protection

Symantec

1 product

Endpoint Protection

Configuration A

52 vulnerable

Vulnerable Software	Affected Versions
Symantec Endpoint Protection	Version 11.0
Symantec Endpoint Protection	Version 11.0 mr1
Symantec Endpoint Protection	Version 11.0 mr2
Symantec Endpoint Protection	Version 11.0 mr3
Symantec Endpoint Protection	Version 11.0 mr4-mp1a
Symantec Endpoint Protection	Version 11.0 mr4-mp2
Symantec Endpoint Protection	Version 11.0 mr4
Symantec Endpoint Protection	Version 11.0 ru5
Symantec Endpoint Protection	Version 11.0 ru6-mp1
Symantec Endpoint Protection	Version 11.0 ru6-mp2
Symantec Endpoint Protection	Version 11.0 ru6-mp3
Symantec Endpoint Protection	Version 11.0 ru6
Symantec Endpoint Protection	Version 11.0 ru6a
Symantec Endpoint Protection	Version 11.0 ru7-mp1
Symantec Endpoint Protection	Version 11.0 ru7-mp2
Symantec Endpoint Protection	Version 11.0 ru7-mp3
Symantec Endpoint Protection	Version 11.0 ru7-mp4
Symantec Endpoint Protection	Version 11.0 ru7-mp4a
Symantec Endpoint Protection	Version 11.0 ru7
Symantec Endpoint Protection	Version 12.1
Symantec Endpoint Protection	Version 12.1 ru1-p1
Symantec Endpoint Protection	Version 12.1 ru1
Symantec Endpoint Protection	Version 12.1 ru2-mp1
Symantec Endpoint Protection	Version 12.1 ru2
Symantec Endpoint Protection	Version 12.1 ru3
Symantec Endpoint Protection	Version 12.1 ru4-mp1
Symantec Endpoint Protection	Version 12.1 ru4-mp1a
Symantec Endpoint Protection	Version 12.1 ru4-mp1b
Symantec Endpoint Protection	Version 12.1 ru4
Symantec Endpoint Protection	Version 12.1 ru4a
Symantec Endpoint Protection	Version 12.1 ru5
Symantec Endpoint Protection	Version 12.1 ru6-mp1
Symantec Endpoint Protection	Version 12.1 ru6-mp2
Symantec Endpoint Protection	Version 12.1 ru6-mp3
Symantec Endpoint Protection	Version 12.1 ru6-mp4
Symantec Endpoint Protection	Version 12.1 ru6-mp5
Symantec Endpoint Protection	Version 12.1 ru6-mp6
Symantec Endpoint Protection	Version 12.1 ru6-mp7
Symantec Endpoint Protection	Version 12.1 ru6-mp8
Symantec Endpoint Protection	Version 12.1 ru6-mp9
Symantec Endpoint Protection	Version 12.1 ru6
Symantec Endpoint Protection	Version 14.0.0
Symantec Endpoint Protection	Version 14.0.0 mp1
Symantec Endpoint Protection	Version 14.0.0 mp2
Symantec Endpoint Protection	Version 14.0.1
Symantec Endpoint Protection	Version 14.0.1 mp1
Symantec Endpoint Protection	Version 14.0.1 mp2
Symantec Endpoint Protection	Version 14.2
Symantec Endpoint Protection	Version 14.2 mp1
Symantec Endpoint Protection	Version 14.2 ru1
Symantec Endpoint Protection	Version 14.2 ru1_mp1
Symantec Endpoint Protection	Version 14.2 ru2

Configuration B

25 vulnerable

Vulnerable Software	Affected Versions
Symantec Endpoint Protection	Version 12.0 rtm
Symantec Endpoint Protection	Version 12.0 ru1
Symantec Endpoint Protection	Version 12.1
Symantec Endpoint Protection	Version 12.1 ru1-mp1
Symantec Endpoint Protection	Version 12.1 ru1
Symantec Endpoint Protection	Version 12.1 ru2-mp1
Symantec Endpoint Protection	Version 12.1 ru2
Symantec Endpoint Protection	Version 12.1 ru3
Symantec Endpoint Protection	Version 12.1 ru4-mp1
Symantec Endpoint Protection	Version 12.1 ru4-mp1a
Symantec Endpoint Protection	Version 12.1 ru4-mp1b
Symantec Endpoint Protection	Version 12.1 ru4
Symantec Endpoint Protection	Version 12.1 ru4a
Symantec Endpoint Protection	Version 12.1 ru5
Symantec Endpoint Protection	Version 12.1 ru6
Symantec Endpoint Protection	Version 12.1 ru6_mp10
Symantec Endpoint Protection	Version 12.1 ru6_mp1
Symantec Endpoint Protection	Version 12.1 ru6_mp2
Symantec Endpoint Protection	Version 12.1 ru6_mp3
Symantec Endpoint Protection	Version 12.1 ru6_mp4
Symantec Endpoint Protection	Version 12.1 ru6_mp5
Symantec Endpoint Protection	Version 12.1 ru6_mp6
Symantec Endpoint Protection	Version 12.1 ru6_mp7
Symantec Endpoint Protection	Version 12.1 ru6_mp8
Symantec Endpoint Protection	Version 12.1 ru6_mp9

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://support.symantec.com/us/en/article.SYMSA1505.html

Source: secure@symantec.com

Vendor Advisory

https://support.symantec.com/us/en/article.SYMSA1505.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.