← Back

CVE-2023-39206

nvd nist
Published: Nov 14, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

Affected (21)

Zoom
5 products
Meetings
Rooms
Video Software Development Kit
Virtual Desktop Infrastructure
Zoom
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Zoom
Meetings
Before 5.16.0
Meetings
Before 5.16.0
Meetings
Before 5.16.0
Meetings
Before 5.16.0
Meetings
Before 5.16.0
Zoom
Rooms
Before 5.16.0
Rooms
Before 5.16.0
Rooms
Before 5.16.0
Rooms
Before 5.16.0
Zoom
Video Software Development Kit
Before 1.9.0
Video Software Development Kit
Before 1.9.0
Video Software Development Kit
Before 1.9.0
Video Software Development Kit
Before 1.9.0
Video Software Development Kit
Before 1.9.0
Zoom
Virtual Desktop Infrastructure
Before 5.14.13
Virtual Desktop Infrastructure
From 5.15.0 to 5.15.11
Zoom
Zoom
Before 5.16.0
Zoom
Before 5.16.0
Zoom
Before 5.16.0
Zoom
Before 5.16.0
Zoom
Before 5.16.0

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

Source: security@zoom.us
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.