Lucene search
HistoryAug 14, 2024 - 5:15 p.m.
CVE-2024-42436
buffer overflow
zoom workplace apps
denial of service
network access
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
14.1%
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.
Affected configurations
Node
zoommeeting_software_development_kitRange<6.1.0android
ORzoommeeting_software_development_kitRange<6.1.0iphone_os
ORzoommeeting_software_development_kitRange<6.1.0macos
ORzoommeeting_software_development_kitRange<6.1.0windows
ORzoomroomsRange<6.1.0ipados
ORzoomroomsRange<6.1.0macos
ORzoomroomsRange<6.1.0windows
ORzoomrooms_controllerRange<6.1.0android
ORzoomrooms_controllerRange<6.1.0linux
ORzoomrooms_controllerRange<6.1.0macos
ORzoomrooms_controllerRange<6.1.0windows
ORzoomworkplaceRange<6.1.0android
ORzoomworkplaceRange<6.1.0iphone_os
ORzoomworkplace_desktopRange<6.1.0linux
ORzoomworkplace_desktopRange<6.1.0macos
ORzoomworkplace_desktopRange<6.1.0windows
ORzoomworkplace_virtual_desktop_infrastructureRange<5.17.14windows
ORzoomworkplace_virtual_desktop_infrastructureRange6.0–6.0.11windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zoom | meeting_software_development_kit | * | cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:* |
| zoom | meeting_software_development_kit | * | cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:* |
| zoom | meeting_software_development_kit | * | cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:* |
| zoom | meeting_software_development_kit | * | cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:* |
| zoom | rooms_controller | * | cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:* |
| zoom | rooms_controller | * | cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:* |
| zoom | rooms_controller | * | cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:* |
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
14.1%
Related for NVD:CVE-2024-42436