Out-of-bounds Read in Symantec Endpoint Protection
CVE-2020-5826
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.
Vulnerability class: Buffer Overflow
EPSS: 0.003 (26.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Symantec Endpoint_protection — versions 11.0, 12.1, 14.0.0
- N/a Symantec Endpoint Protection (Sep) And Small Business Edition (Sep Sbe) — versions Prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively
Weakness classification (CWE)
References
- secure@symantec.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-5826?
- CVE-2020-5826 is a medium-severity vulnerability in Symantec Endpoint Protection, classified under Out-of-bounds Read. CVSS score: 5.5/10. Published 2020-02-11.
- How severe is CVE-2020-5826?
- Medium severity. CVSS v3 base score is 5.5 out of 10.