High severity7.5NVD Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2018-20031

Description

A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Revenera/Flexnet Publisher
cpe:2.3:a:flexera:flexnet_publisher:*:*:*:*:*:*:*:*
Range: <=11.16.1.0
Oracle Corporation/Communications Lsms
cpe:2.3:a:oracle:communications_lsms:*:*:*:*:*:*:*:*
Range: >=13.1,<=13.4
FlexNet Publisher/lmgrdllm-create
Range: <=11.16.1.0
FlexNet Publisher/vendor daemonllm-create
Range: <=11.16.1.0
Flexera Software/FlexNet Publisherllm-fuzzy
Range: <=11.16.1.0
Flexera Software LLC/FlexNet Publisherv5
Range: 11.16.1.0 and earlier

Patches

Vulnerability mechanics

References

www.oracle.com/security-alerts/cpuoct2021.htmlnvdPatchThird Party Advisory
secuniaresearch.flexerasoftware.com/advisories/85979/nvdNot ApplicableVendor Advisory
www.securityfocus.com/bid/109155nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000