What is CVE-2019-8960?

CVE-2019-8960 is a high-severity vulnerability in Flexera Flexnet Publisher, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.5/10. Published 2020-04-21.

How severe is CVE-2019-8960?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Flexera Flexnet Publisher

CVE-2019-8960

A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2. The message reading function used in lmadmin.exe can, given a certain message, call itself again and then wait for a further message. With a particular flag set in the original message, but no second message received, the function eventually return an unexpected value which leads to an exception being thrown. The end result can be process termination.

EPSS: 0.013 (67.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Flexera Flexnet_publisher — versions 11.16.2
N/a — versions n/a

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-8960?: CVE-2019-8960 is a high-severity vulnerability in Flexera Flexnet Publisher, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.5/10. Published 2020-04-21.
How severe is CVE-2019-8960?: High severity. CVSS v3 base score is 7.5 out of 10.