Lucene search

K
cvelistZoomCVELIST:CVE-2023-39206
HistoryNov 14, 2023 - 11:02 p.m.

CVE-2023-39206

2023-11-1423:02:41
CWE-120
Zoom
www.cve.org
buffer overflow
zoom clients
denial of service
unauthenticated user
network access

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux",
      "iOS",
      "Android"
    ],
    "product": "Zoom Clients",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "see references"
      }
    ]
  }
]

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

Related for CVELIST:CVE-2023-39206