Lucene search

[email protected]CVE-2023-34115

HistoryJun 13, 2023 - 7:15 p.m.

CVE-2023-34115

2023-06-1319:15:09

CWE-120

[email protected]

web.nvd.nist.gov

cve-2023-34115

buffer copy

input size

zoom meeting sdk

denial of service

local access

4.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

JSON

Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK to crash and need to be restarted.

Affected configurations

NVD

Node

zoommeeting_sdkRange<5.13.0

CPENameOperatorVersion
zoom:meeting_sdkzoom meeting sdklt5.13.0

CPE	Name	Operator	Version
zoom:meeting_sdk	zoom meeting sdk	lt	5.13.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Zoom Meeting SDK",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "before 5.13.0"
      }
    ]
  }
]

References

explore.zoom.us/en/trust/security/security-bulletin/

4.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

JSON

Related for CVE-2023-34115

prion1 cvelist1 nvd1