MEDIUM · 5.7

CVE-2017-13682

In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way tha...

Vulnerability Description

In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way that memory which is no longer needed is not released. In object-oriented programming, a memory leak may happen when an object is stored in memory but cannot be accessed by the running code.

CVSS Score

5.7

MEDIUM

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
SymantecEncryption Desktop>= 10.3.0, <= 10.4.1

Related Weaknesses (CWE)

References

FAQ

What is CVE-2017-13682?

CVE-2017-13682 is a vulnerability with a CVSS score of 5.7 (MEDIUM). In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way tha...

How severe is CVE-2017-13682?

CVE-2017-13682 has been rated MEDIUM with a CVSS base score of 5.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-13682?

Check the references section above for vendor advisories and patch information. Affected products include: Symantec Encryption Desktop.