CVE-2018-5236 - Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard)

Back Back to CVE browser

MEDIUM

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard)

Published Jun 20, 2018

5.3

MEDIUM

CVSS 3.0

EPSS 1.07%

Description

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard). This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events.

Affected products

Vendor Symantec Corporation Product Symantec Endpoint Protection Default
n/a
- Version
  Prior to 14 RU1 MP1 or 12.1 RU6 MP10
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Symantec Corporation

Symantec Endpoint Protection

n/a

Version	Status	Constraints
Prior to 14 RU1 MP1 or 12.1 RU6 MP10	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-362

Race Condition

References (3)

http://www.securityfocus.com/bid/104198
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041180
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://support.symantec.com/en_US/article.SYMSA1454.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/104198		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041180		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://support.symantec.com/en_US/article.SYMSA1454.html		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner symantec

Published Jun 20, 2018

Updated Sep 17, 2024

Reserved Jan 5, 2018

Link CVE-2018-5236

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-5236

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-5236