Lucene search

K
nvd[email protected]NVD:CVE-2023-36532
HistoryAug 08, 2023 - 6:15 p.m.

CVE-2023-36532

2023-08-0818:15:13
CWE-122
CWE-787
web.nvd.nist.gov
6
cve-2023-36532
buffer overflow
zoom clients
denial of service
network access

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

37.1%

Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.

Affected configurations

Nvd
Node
zoomroomsRange<5.14.5android
OR
zoomroomsRange<5.14.5ipad_os
OR
zoomroomsRange<5.14.5macos
OR
zoomroomsRange<5.14.5windows
OR
zoomvirtual_desktop_infrastructureRange<5.14.5
OR
zoomzoomRange<5.14.5android
OR
zoomzoomRange<5.14.5iphone_os
OR
zoomzoomRange<5.14.5linux
OR
zoomzoomRange<5.14.5macos
OR
zoomzoomRange<5.14.5windows
VendorProductVersionCPE
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipad_os:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
zoomvirtual_desktop_infrastructure*cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

37.1%

Related for NVD:CVE-2023-36532