CVE-2023-22881: medium-severity vulnerability in Zoom (for Android, iOS, Linux, macOS, and…
Denial of Service in Zoom Clients
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 1.1%
Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Zoom Video Communications Inc · Zoom (for Android, iOS, Linux, macOS, and Windows) clients before version 5.13.5Related CVEs — Zoom (for Android, iOS, Linux, macOS, and…
In the same product, most dangerous first.