Lucene search

[email protected]CVE-2023-36532

HistoryAug 08, 2023 - 6:15 p.m.

CVE-2023-36532

2023-08-0818:15:13

CWE-787

CWE-122

[email protected]

web.nvd.nist.gov

cve-2023-36532

zoom

buffer overflow

denial of service

network access

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.

Affected configurations

NVD

Node

zoomroomsRange<5.14.5android

zoomroomsRange<5.14.5ipad_os

zoomroomsRange<5.14.5macos

zoomroomsRange<5.14.5windows

zoomvirtual_desktop_infrastructureRange<5.14.5

zoomzoomRange<5.14.5android

zoomzoomRange<5.14.5iphone_os

zoomzoomRange<5.14.5linux

zoomzoomRange<5.14.5macos

zoomzoomRange<5.14.5windows

CPENameOperatorVersion
zoom:roomszoom roomslt5.14.5
zoom:virtual_desktop_infrastructurezoom virtual desktop infrastructurelt5.14.5
zoom:zoomzoomlt5.14.5

CPE	Name	Operator	Version
zoom:rooms	zoom rooms	lt	5.14.5
zoom:virtual_desktop_infrastructure	zoom virtual desktop infrastructure	lt	5.14.5
zoom:zoom	zoom	lt	5.14.5

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Zoom Clients",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "before 5.14.5"
      }
    ]
  }
]