CVE-2019-8961
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Because the message reading function calls itself recursively given a certain condition in the received message, an unauthenticated remote attacker can repeatedly send messages of that type to cause a stack exhaustion condition.
Se ha identificado una vulnerabilidad de denegación de servicio relacionada con un agotamiento de pila (stack) en lmadmin.exe de FlexNet Publisher versión 11.16.2. Dado que la función de lectura de mensajes se llama a sí misma de forma recursiva dada una determinada condición en el mensaje recibido, un atacante remoto no autenticado puede enviar mensajes repetidas veces de ese tipo para causar una condición de agotamiento de pila (stack).
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-02-20 CVE Reserved
- 2020-04-21 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-674: Uncontrolled Recursion
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Flexera Search vendor "Flexera" | Flexnet Publisher Search vendor "Flexera" for product "Flexnet Publisher" | 11.16.2 Search vendor "Flexera" for product "Flexnet Publisher" and version "11.16.2" | - |
Affected
| ||||||