CVE-2018-20031
First published: Thu Mar 21 2019(Updated: )
A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.
Credit: PSIRT-CNA@flexerasoftware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Flexera FlexNet Publisher | <=11.16.1.0 | |
| Oracle Communications LSMS | >=13.1<=13.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-20031?
CVE-2018-20031 is a Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier.
How does CVE-2018-20031 affect FlexNet Publisher?
CVE-2018-20031 affects FlexNet Publisher version 11.16.1.0 and earlier by allowing a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing a denial of service.
How does CVE-2018-20031 impact Oracle Communications Lsms?
CVE-2018-20031 impacts Oracle Communications Lsms versions between 13.1 and 13.4 by allowing a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing a denial of service.
What is the severity of CVE-2018-20031?
CVE-2018-20031 has a severity rating of high (7.5).
How can I mitigate the vulnerability in FlexNet Publisher version 11.16.1.0 and earlier?
To mitigate the vulnerability in FlexNet Publisher version 11.16.1.0 and earlier, it is recommended to upgrade to a patched version or apply the necessary security patches provided by Flexera.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/author
- agent/severity
- agent/last-modified-date
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/flexera
- canonical/flexera flexnet publisher
- version/flexera flexnet publisher/11.16.1.0
- vendor/oracle
- canonical/oracle communications lsms
- version/oracle communications lsms/13.1
- version/oracle communications lsms/13.4