CVE-2026-43842
MediumCVSS 6.9Summary
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.
Risk Assessment
An unauthenticated attacker can cause a crash of the license manager service, resulting in system unavailability (denial of service).
Recommendation
Update the license manager service to a patched version.
Other vulnerabilities in License manager service
See all- CVE-2026-43843Medium
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
- CVE-2026-43841Medium
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.
- CVE-2026-43840Medium
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.
Original NVD description (English source)
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS