CVE-2018-18367
First published: Thu Apr 25 2019(Updated: )
Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Endpoint Protection Manager | =12.1-rtm | |
| Symantec Endpoint Protection Manager | =12.1-ru1 | |
| Symantec Endpoint Protection Manager | =12.1-ru1-mp1 | |
| Symantec Endpoint Protection Manager | =12.1-ru2 | |
| Symantec Endpoint Protection Manager | =12.1-ru2-mp1 | |
| Symantec Endpoint Protection Manager | =12.1-ru3 | |
| Symantec Endpoint Protection Manager | =12.1-ru4 | |
| Symantec Endpoint Protection Manager | =12.1-ru4-mp1 | |
| Symantec Endpoint Protection Manager | =12.1-ru4-mp1a | |
| Symantec Endpoint Protection Manager | =12.1-ru4-mp1b | |
| Symantec Endpoint Protection Manager | =12.1-ru4a | |
| Symantec Endpoint Protection Manager | =12.1-ru5 | |
| Symantec Endpoint Protection Manager | =12.1-ru6 | |
| Symantec Endpoint Protection Manager | =12.1-ru6-mp1 | |
| Symantec Endpoint Protection Manager | =12.1-ru6-mp1a | |
| Symantec Endpoint Protection Manager | =12.1-ru6-mp2 | |
| Symantec Endpoint Protection Manager | =12.1-ru6-mp3 | |
| Symantec Endpoint Protection Manager | =12.1-ru6-mp4 | |
| Symantec Endpoint Protection Manager | =12.1-ru6-mp5 | |
| Symantec Endpoint Protection Manager | =12.1-ru6-mp6 | |
| Symantec Endpoint Protection Manager | =12.1-ru6-mp7 | |
| Symantec Endpoint Protection Manager | =12.1-ru6-mp8 | |
| Symantec Endpoint Protection Manager | =12.1-ru6-mp9 | |
| Symantec Endpoint Protection Manager | =14 | |
| Symantec Endpoint Protection Manager | =14-mp1 | |
| Symantec Endpoint Protection Manager | =14-mp2 | |
| Symantec Endpoint Protection Manager | =14.0.1 | |
| Symantec Endpoint Protection Manager | =14.0.1-mp1 | |
| Symantec Endpoint Protection Manager | =14.0.1-mp2 | |
| Symantec Endpoint Protection Manager | =14.1 | |
| Symantec Endpoint Protection Manager | =14.2 | |
| Symantec Endpoint Protection Manager | =14.2-mp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2018-18367.
What is the severity level of CVE-2018-18367?
CVE-2018-18367 has a severity level of 7.8 (High).
What is the affected software for CVE-2018-18367?
The affected software is Symantec Endpoint Protection Manager (SEPM) versions prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1.
What is the type of vulnerability for CVE-2018-18367?
CVE-2018-18367 is a DLL Preloading vulnerability.
How can I fix CVE-2018-18367?
To fix CVE-2018-18367, update Symantec Endpoint Protection Manager to version 12.1 RU6 MP10 or 14.2 RU1.
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/symantec
- canonical/symantec endpoint protection manager
- version/symantec endpoint protection manager/12.1-rtm
- version/symantec endpoint protection manager/12.1-ru1
- version/symantec endpoint protection manager/12.1-ru1-mp1
- version/symantec endpoint protection manager/12.1-ru2
- version/symantec endpoint protection manager/12.1-ru2-mp1
- version/symantec endpoint protection manager/12.1-ru3
- version/symantec endpoint protection manager/12.1-ru4
- version/symantec endpoint protection manager/12.1-ru4-mp1
- version/symantec endpoint protection manager/12.1-ru4-mp1a
- version/symantec endpoint protection manager/12.1-ru4-mp1b
- version/symantec endpoint protection manager/12.1-ru4a
- version/symantec endpoint protection manager/12.1-ru5
- version/symantec endpoint protection manager/12.1-ru6
- version/symantec endpoint protection manager/12.1-ru6-mp1
- version/symantec endpoint protection manager/12.1-ru6-mp1a
- version/symantec endpoint protection manager/12.1-ru6-mp2
- version/symantec endpoint protection manager/12.1-ru6-mp3
- version/symantec endpoint protection manager/12.1-ru6-mp4
- version/symantec endpoint protection manager/12.1-ru6-mp5
- version/symantec endpoint protection manager/12.1-ru6-mp6
- version/symantec endpoint protection manager/12.1-ru6-mp7
- version/symantec endpoint protection manager/12.1-ru6-mp8
- version/symantec endpoint protection manager/12.1-ru6-mp9
- version/symantec endpoint protection manager/14
- version/symantec endpoint protection manager/14-mp1
- version/symantec endpoint protection manager/14-mp2
- version/symantec endpoint protection manager/14.0.1
- version/symantec endpoint protection manager/14.0.1-mp1
- version/symantec endpoint protection manager/14.0.1-mp2
- version/symantec endpoint protection manager/14.1
- version/symantec endpoint protection manager/14.2
- version/symantec endpoint protection manager/14.2-mp1