PT-2023-4693 · Zoom · Zoom

Published 2023-08-08 · Updated 2024-09-19 · CVE-2023-36533

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Zoom versions prior to 5.14.7

Description The issue is related to uncontrolled resource consumption, which may allow an unauthenticated user to cause a denial of service via network access. This can be exploited by a remote attacker to disrupt service.

Recommendations For versions prior to 5.14.7, update to version 5.14.7 or later to resolve the issue.

Fix

Resource Exhaustion

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-400

CWE-772

Related Identifiers

BDU:2023-05114

CVE-2023-36533

Affected Products

Zoom

References · 5

• https://bdu.fstec.ru/vul/2023-05114 · Security Note
• https://explore.zoom.us/en/trust/security/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-36533 · Security Note
• https://osv.dev/vulnerability/CVE-2023-36533 · Vendor Advisory
• https://vuldb.com/ru/?id.236578 · Note