Lucene search

[email protected]NVD:CVE-2021-34423

HistoryNov 24, 2021 - 5:15 p.m.

CVE-2021-34423

2021-11-2417:15:07

CWE-120

[email protected]

web.nvd.nist.gov

buffer overflow

cve-2021-34423

zoom client

zoom meeting sdk

vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

72.2%

JSON

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom On-Premise Meeting Connector Controller before version 4.8.12.20211115, Zoom On-Premise Meeting Connector MMR before version 4.8.12.20211115, Zoom On-Premise Recording Connector before version 5.1.0.65.20211116, Zoom On-Premise Virtual Room Connector before version 4.4.7266.20211117, Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5692.20211117, Zoom Hybrid Zproxy before version 1.0.1058.20211116, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64. This can potentially allow a malicious actor to crash the service or application, or leverage this vulnerability to execute arbitrary code.

Affected configurations

Nvd

Node

googleandroidMatch-

AND

zoommeetingsRange<5.8.3

Node

applemacosMatch-

AND

zoommeetingsRange<5.8.4

Node

appleiphone_osMatch-

AND

zoommeetingsRange<5.8.4

Node

linuxlinux_kernelMatch-

AND

zoommeetingsRange<5.8.4

Node

microsoftwindowsMatch-

AND

zoommeetingsRange<5.8.4

Node

googleandroidMatch-

AND

zoommeetings_for_blackberryRange<5.8.1

Node

appleiphone_osMatch-

AND

zoommeetings_for_blackberryRange<5.8.1

Node

appleiphone_osMatch-

AND

zoommeetings_for_intuneRange<5.8.4

Node

zoommeetings_for_intuneRange<5.8.4

AND

googleandroidMatch-

Node

zoommeetings_for_chrome_osRange<5.0.1

Node

zoomrooms_for_conference_roomsRange<5.8.3

AND

googleandroidMatch-

Node

zoomrooms_for_conference_roomsRange<5.8.3

AND

applemacosMatch-

Node

zoomrooms_for_conference_roomsRange<5.8.3

AND

microsoftwindowsMatch-

Node

zoomcontrollers_for_zoom_roomsRange<5.8.3

AND

microsoftwindowsMatch-

Node

zoomcontrollers_for_zoom_roomsRange<5.8.3

AND

appleiphone_osMatch-

Node

zoomcontrollers_for_zoom_roomsRange<5.8.3

AND

googleandroidMatch-

Node

zoomvirtual_desktop_infrastructureRange<5.8.4

Node

zoomandroid_meeting_sdkRange<5.7.6.1922

zoomiphone_os_meeting_sdkRange<5.7.6.1082

zoommacos_meeting_sdkRange<5.7.6.1340

zoomwindows_meeting_sdkRange<5.7.6.1081

Node

zoomandroid_video_sdkRange<1.1.2

zoomiphone_os_video_sdkRange<1.1.2

zoommacos_video_sdkRange<1.1.2

zoomwindows_video_sdkRange<1.1.2

Node

zoomhybrid_mmrRange<4.6.20211116.131

zoomhybrid_zproxyRange<1.0.1058.20211116

zoomzoom_on-premise_meeting_connector_controllerRange<4.8.12.20211115

zoomzoom_on-premise_meeting_connector_mmrRange<4.8.12.20211115

zoomzoom_on-premise_recording_connectorRange<5.1.0.65.20211116

zoomzoom_on-premise_virtual_room_connectorRange<4.4.7266.20211117

zoomzoom_on-premise_virtual_room_connector_load_balancerRange<2.5.5692.20211117

Node

zoomvdi_azure_virtual_desktopRange<5.8.4.21112

zoomvdi_citrixRange<5.8.4.21112

zoomvdi_vmwareRange<5.8.4.21112

zoomvdi_windows_meeting_clientRange<5.8.4

VendorProductVersionCPE
googleandroid-cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
zoommeetings*cpe:2.3:a:zoom:meetings:*:*:*:*:*:*:*:*
applemacos-cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
appleiphone_os-cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
zoommeetings_for_blackberry*cpe:2.3:a:zoom:meetings_for_blackberry:*:*:*:*:*:*:*:*
zoommeetings_for_intune*cpe:2.3:a:zoom:meetings_for_intune:*:*:*:*:*:*:*:*
zoommeetings_for_chrome_os*cpe:2.3:a:zoom:meetings_for_chrome_os:*:*:*:*:*:*:*:*
zoomrooms_for_conference_rooms*cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	-	cpe:2.3:o:google:android:-:::::::*
zoom	meetings	*	cpe:2.3:a:zoom:meetings::::::::
apple	macos	-	cpe:2.3:o:apple:macos:-:::::::*
apple	iphone_os	-	cpe:2.3:o:apple:iphone_os:-:::::::*
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*
zoom	meetings_for_blackberry	*	cpe:2.3:a:zoom:meetings_for_blackberry::::::::
zoom	meetings_for_intune	*	cpe:2.3:a:zoom:meetings_for_intune::::::::
zoom	meetings_for_chrome_os	*	cpe:2.3:a:zoom:meetings_for_chrome_os::::::::
zoom	rooms_for_conference_rooms	*	cpe:2.3:a:zoom:rooms_for_conference_rooms::::::::