CVE-2023-39208

2023-09-1220:15:09

CWE-79

CWE-20

Zoom

web.nvd.nist.gov

cve-2023-39208

zoom

linux

input validation

denial of service

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

37.2%

JSON

Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network access.

Affected configurations

Nvd

Node

zoomzoomRange<5.15.10linux

VendorProductVersionCPE
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*

Vendor	Product	Version	CPE
zoom	zoom	*	cpe:2.3:a:zoom:zoom::::::linux::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Zoom Desktop Client for Linux",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "before version 5.15.10"
      }
    ]
  }
]