CVE-2023-22882 — Denial of Service in Zoom Clients

CVE-2023-22882

Denial of Service in Zoom Clients PUBLISHED

Description (CNA)

Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.

Affected (CNA)

Vendor / product	Versions
Zoom Video Communications Inc / Zoom (for Android, iOS, Linux, macOS, and Windows) clients before version 5.13.5	affected unspecified before 5.13.5

CWE

CWE-119

References

https://explore.zoom.us/en/trust/security/security-bulletin/

ADP enrichment

CVE

No English description supplied.

https://explore.zoom.us/en/trust/security/security-bulletin/

CISA-ADP

No English description supplied.

No references supplied.