PT-2023-5208 · Zoom · Zoom Desktop Client For Linux

CVE-2023-39208

·

Publicado

2023-07-25

·

Atualizado

2024-09-27

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Zoom Desktop Client for Linux versions prior to 5.15.10
Description The issue is related to improper input validation in the Zoom Desktop Client for Linux, which may allow an unauthenticated user to conduct a denial of service via network access. This can be exploited by a remote attacker, leading to a denial of service.
Recommendations For versions prior to 5.15.10, update to version 5.15.10 or later to resolve the issue. As a temporary workaround, consider restricting network access to the Zoom Desktop Client for Linux until a patch is applied.

Correção

RCE

XSS

Improper Resource Release

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-05815
CVE-2023-39208

Produtos afetados

Zoom Desktop Client For Linux