CVE-2015-8277: Flexerasoftware Flexnet Publisher

Critical severity, CVSS 9.8. EPSS: 28.7% chance of exploitation in the next 30 days.

Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with opcode (a) 0x107 or (b) 0x10a.

Affected products

• Flexerasoftware Flexnet Publisher: up to and including 11.13.1.0

Published 2016-02-24. Last modified 2026-06-17.