Lucene search

[email protected]CVE-2023-22881

HistoryMar 16, 2023 - 9:15 p.m.

CVE-2023-22881

2023-03-1621:15:12

NVD-CWE-noinfo

CWE-119

[email protected]

web.nvd.nist.gov

zoom

cve-2023-22881

stun

parsing

vulnerability

remote crash

denial of service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

31.2%

JSON

Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.

CPENameOperatorVersion
zoom:zoomzoomlt5.13.5
zoom:zoomzoomeq3.0.46193.0828
zoom:zoomzoomeq4.6.3
zoom:zoomzoomeq2.5.40542.0410
zoom:zoomzoomeq3.5.19689.0629
zoom:zoomzoomeq3.5.27367.0922
zoom:zoomzoomeq3.6.9011.1018
zoom:zoomzoomeq3.6.17925.1230
zoom:zoomzoomeq3.5.16903.0522
zoom:zoomzoomeq4.1.11049.1024

CPE	Name	Operator	Version
zoom:zoom	zoom	lt	5.13.5
zoom:zoom	zoom	eq	3.0.46193.0828
zoom:zoom	zoom	eq	4.6.3
zoom:zoom	zoom	eq	2.5.40542.0410
zoom:zoom	zoom	eq	3.5.19689.0629
zoom:zoom	zoom	eq	3.5.27367.0922
zoom:zoom	zoom	eq	3.6.9011.1018
zoom:zoom	zoom	eq	3.6.17925.1230
zoom:zoom	zoom	eq	3.5.16903.0522
zoom:zoom	zoom	eq	4.1.11049.1024

Rows per page:

1-10 of 4041

References

explore.zoom.us/en/trust/security/security-bulletin/

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

31.2%

JSON

Related for CVE-2023-22881

prion1 nessus1 openvas3