PT-2023-4693 · Zoom · Zoom

CVE-2023-36533 · Publicado 2023-08-08 · Atualizado 2024-09-19

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Zoom versions prior to 5.14.7

Description The issue is related to uncontrolled resource consumption, which may allow an unauthenticated user to cause a denial of service via network access. This can be exploited by a remote attacker to disrupt service.

Recommendations For versions prior to 5.14.7, update to version 5.14.7 or later to resolve the issue.

Correção

Resource Exhaustion

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-400

CWE-772

Identificadores relacionados

BDU:2023-05114

CVE-2023-36533

Produtos afetados

Zoom

Referências · 5

• https://bdu.fstec.ru/vul/2023-05114 · Nota de Segurança
• https://explore.zoom.us/en/trust/security/security-bulletin · Aviso do Fabricante
• https://vuldb.com/ru/?id.236578 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-36533 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-36533 · Aviso do Fabricante