CVE-2018-20032 A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Flexera FlexNet Publisher | <= 11.16.1.0 | No fix listed |
| oracle communications lsms | >= 13.1, <= 13.4 | No fix listed |
| Flexera Software FlexNet Publisher | = 11.16.1.0 and earlier | No fix listed |
References
- 109155 broken-link vdb-entry
- secuniaresearch.flexerasoftware.com not-applicable vendor-advisory
- www.oracle.com patch third-party-advisory