CVE-2018-16722: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of servic

Routine

HIGH 7.8DOWNGRADE

CVE-2018-16722 is a high-severity flaw (CVSS 7.8) affecting jingyun antivirus. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360094, a related issue to CVE-2018-16305.

Why this priority

High severity

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.8 (High)
Attack vector	Local
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.3% (top 75%)
CISA exploited list	No
Weakness	CWE-20
Published	2020-11-23
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: v-secure

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2020-11-23 21:15 UTCPublished CVE record published
2026-06-17 01:44 UTCUpdated Record last modified

v-secure jingyun antivirus DOWNGRADE

Affected: 2.4.2.39

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.4.2.39

1. Check installed version

apt-cache policy jingyun-antivirus || rpm -q jingyun-antivirus || jingyun-antivirus --version

2. No fixed release: DOWNGRADE to a release before 2.4.2.39 (Debian / Ubuntu)

apt-cache madison jingyun-antivirus sudo apt install jingyun-antivirus=<VERSION_BEFORE_2.4.2.39> sudo apt-mark hold jingyun-antivirus

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list jingyun-antivirus sudo dnf downgrade jingyun-antivirus-<VERSION_BEFORE_2.4.2.39> sudo dnf versionlock add jingyun-antivirus

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2018-16722?

jingyun antivirus: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2018-16722 being exploited?

CVE-2018-16722 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2018-16722 affect?

CVE-2018-16722 affects jingyun antivirus. Severity is high (CVSS 7.8). In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360094, a related issue t

How urgent is CVE-2018-16722?

Priority 34/100. High severity

Related CVEs

CVE-2018-16723 HIGH 7.8 DOWNGRADE In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of servic
CVE-2018-16721 HIGH 7.8 DOWNGRADE In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of servic
CVE-2018-16720 HIGH 7.8 DOWNGRADE In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of servic
CVE-2018-16719 HIGH 7.8 DOWNGRADE In Jingyun Antivirus v2.4.2.39, the driver file (hookbody.sys) allows local users to cause a denial of service

References

← Back to latest CVEs