Vulnerability Description
A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2. The message reading function used in lmadmin.exe can, given a certain message, call itself again and then wait for a further message. With a particular flag set in the original message, but no second message received, the function eventually return an unexpected value which leads to an exception being thrown. The end result can be process termination.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Flexera | Flexnet Publisher | 11.16.2 |
Related Weaknesses (CWE)
References
- https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2019-8960-Vendor Advisory
- https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2019-8960-Vendor Advisory
FAQ
What is CVE-2019-8960?
CVE-2019-8960 is a vulnerability with a CVSS score of 7.5 (HIGH). A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2. The message reading function used in lmadmin.exe can, given a certai...
How severe is CVE-2019-8960?
CVE-2019-8960 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-8960?
Check the references section above for vendor advisories and patch information. Affected products include: Flexera Flexnet Publisher.