CVE-2018-20033

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-02-25 · updated 2026-06-17
Weakness: CWE-770

Description

A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and the vendor daemon to stop. This would force the vendor daemon to shut down. No exploit of this vulnerability has been demonstrated.

Affected products

Flexera FlexNet Publisher: through 11.16.1.0
Oracle Communications Lsms: from 13.1 through 13.4

References

http://www.securityfocus.com/bid/109155
https://secuniaresearch.flexerasoftware.com/advisories/85979/
https://www.oracle.com/security-alerts/cpuoct2021.html
http://www.securityfocus.com/bid/109155
https://secuniaresearch.flexerasoftware.com/advisories/85979/
https://www.oracle.com/security-alerts/cpuoct2021.html

Get alerted when CVE-2018-20033 or the next vulnerability affects your stack