CVE-2018-20033: flexera software llc flexnet publisher

Vulnerability summary

CVE-2018-20033 is a critical (CVSS 9.8) vulnerability in flexera software llc flexnet publisher. EPSS estimates a 3.67% chance of exploitation in the next 30 days, higher than 89.5% of scored vulnerabilities.

Timeline

1. 25-02-2019
   PublishedVulnerability first disclosed.
2. 17-09-2024
   Last modifiedVulnerability information updated.

Description

A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and the vendor daemon to stop. This would force the vendor daemon to shut down. No exploit of this vulnerability has been demonstrated.

• CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.