Critical ICSA-19-323-01 4 CVEs

Flexera FlexNet Publisher

Published Nov 19, 2019 · Updated Nov 19, 2019

Vendor: Flexera Software Product: FlexNet Publisher

Summary

These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product. The memory corruption vulnerability could allow remote code execution.

Vulnerabilities 4

Unscored —

CVE-2018-20031

A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet …

Flexera Software FlexNet Publisher

Mar 21, 2019
Unscored —

CVE-2018-20032

A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publishe…

Flexera Software FlexNet Publisher

Mar 21, 2019
Unscored —

CVE-2018-20033

A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and …

Flexera Software FlexNet Publisher

Feb 25, 2019
Unscored —

CVE-2018-20034

A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet …

Flexera Software FlexNet Publisher

Mar 21, 2019

Revision history

2019-11-19 #1
ICSA-19-323-01 Flexera FlexNet Publisher

References

ICS Advisory ICSA-19-323-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-323-01
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B