CVE-2019-8961

A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Because the message reading function calls itself recursively given a certain condition in the received message, an unauthenticated remote attacker can repeatedly send messages of that type to cause a stack exhaustion condition.

Score

CVSS 3.1 7.5 High

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2020-04-21

Last modified

2024-08-04

Weaknesses

CWE-674

Affected products

• Flexnet Publisher (Flexera)

References

• https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2019-8961-remediated-in-FlexNet-Publisher/ta-p/12…