PT-2019-3826 · Flexnet · Flexnet Publisher

Publicado 2019-02-25 · Atualizado 2022-04-18 · CVE-2018-20033

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FlexNet Publisher versions 11.16.1.0 and earlier

Description A Remote Code Execution issue in the lmgrd and vendor daemon components could allow a remote attacker to corrupt memory by allocating or deallocating memory, which can cause the heartbeat between lmgrd and the vendor daemon to stop, forcing the vendor daemon to shut down. This issue is related to the ability to damage memory when allocating or deallocating it.

Recommendations For FlexNet Publisher versions 11.16.1.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Buffer Overflow

Enumeração de Fraquezas

CWE-770

CWE-119

Identificadores relacionados

BDU:2019-04185

CVE-2018-20033

Produtos afetados

Flexnet Publisher

Referências · 7

• https://secuniaresearch.flexerasoftware.com/advisories/85979 · Aviso do Fabricante
• https://oracle.com/security-alerts/cpuoct2021.html · Correção
• https://osv.dev/vulnerability/CVE-2018-20033 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-20033 · Nota de Segurança
• https://schneider-electric.com/en/download/document/SEVD-2019-134-04 · Nota
• http://securityfocus.com/bid/109155 · Nota
• https://bdu.fstec.ru/vul/2019-04185 · Nota de Segurança