CVE-2015-8277

9.8 criticalEPSS 29%

Critical (9.8) in flexerasoftware flexnet publisher. EPSS 29% chance of exploitation in the next 30 days.

Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with opcode (a) 0x107 or (b) 0x10a.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 29% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2016-02-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

flexerasoftware:flexnet_publisher

References

http://securitymumblings.blogspot.com/2016/02/cve-2015-8277.html
http://support.citrix.com/article/CTX207824
http://www.kb.cert.org/vuls/id/485744
http://www.securityfocus.com/bid/83334
http://www.securitytracker.com/id/1035266

Check your stack JSON