Vulnerability Description
The lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service (crash) via a type 2F packet with a '01 19' opcode.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Citrix | License Server | <= 11.14.0.0 |
| Citrix | License Server Vpx | <= 11.14.0.0 |
References
- http://support.citrix.com/article/CTX217430Vendor Advisory
- http://www.securityfocus.com/bid/93450
- http://www.securitytracker.com/id/1037008
- https://www.tenable.com/security/research/tra-2016-29
- http://support.citrix.com/article/CTX217430Vendor Advisory
- http://www.securityfocus.com/bid/93450
- http://www.securitytracker.com/id/1037008
- https://www.tenable.com/security/research/tra-2016-29
FAQ
What is CVE-2016-6273?
CVE-2016-6273 is a vulnerability with a CVSS score of 7.5 (HIGH). The lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License S...
How severe is CVE-2016-6273?
CVE-2016-6273 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-6273?
Check the references section above for vendor advisories and patch information. Affected products include: Citrix License Server, Citrix License Server Vpx.