ICSA-19-323-01

icsaUScisa_csaf_ot

Flexera FlexNet Publisher

view advisory published 2019-11-19

These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product. The memory corruption vulnerability could allow remote code execution.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2018-20034UShigh7.5—
A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attac…
CVE-2018-20032UShigh7.5—
A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to s…
CVE-2018-20031UShigh7.5—
A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attac…
CVE-2018-20033UScritical9.8—
A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory b…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan