IM
IronMonkey Threat Research

CVE-2016-6273 HIGH

Published: 2016-10-07 | Last Modified: 2026-06-17 | Status: Modified

Description

The lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service (crash) via a type 2F packet with a '01 19' opcode.

Additional Descriptions (1)

El componente lmadmin en Flexera FlexNet Publisher (también conocido como Flex License Manager) en versiones anteriores a 2015 SP5 y 2016 en versiones anteriores a R1 SP1, como se usa por Citrix License Server para Windows en versiones anteriores a 11.14.0.1 y Citrix License Server VPX en versiones anteriores a 11.14.0.1, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un paquete tipo 2F con un código de operación '01 19'.

CVSS Metrics

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en NVD-CWE-noinfo

Affected Products

Vendor Product Version Update Type
citrix license_server * <built-in method update of dict object at 0x7e60a8d290c0> Application
citrix license_server_vpx * <built-in method update of dict object at 0x7e60a8d2b680> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:citrix:license_server:*:*:*:*:*:windows:*:*
Yes cpe:2.3:a:citrix:license_server_vpx:*:*:*:*:*:*:*:*
Notification
Message here