CVE-2018-20032

published 2019-03-21

CVE-2018-20032: A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
flexera	flexnet_publisher	<= 11.16.1.0	—
flexera_software_llc	flexnet_publisher	—	—
oracle	communications_lsms	13.1 – 13.4	—