CVE-2023-34115: Medium severity Zoom Meeting SDK vulnerability
Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK to crash and need to be restarted.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Zoom Meeting SDKto a version that resolves this vulnerability.Fixed in 5.13.0Patch 5.13.0 - Operational
If Zoom Meeting SDK was affected, plan for potential crashes and be prepared to restart it after upgrading to 5.13.0.
Event History
Frequently Asked Questions
What is the severity of CVE-2023-34115?
The severity of CVE-2023-34115 is medium.
How does CVE-2023-34115 affect the Zoom Meeting SDK?
CVE-2023-34115 may allow an authenticated user to potentially enable a denial of service via local access in the Zoom Meeting SDK before version 5.13.0.
How can CVE-2023-34115 be exploited?
CVE-2023-34115 can be exploited by an authenticated user through local access to potentially cause a denial of service by triggering a buffer copy without checking size of input.
What is the recommended solution for CVE-2023-34115?
To mitigate CVE-2023-34115, it is recommended to update Zoom Meeting SDK to version 5.13.0 or later.
Where can I find more information about CVE-2023-34115?
You can find more information about CVE-2023-34115 in the Zoom Meeting SDK Security Bulletin.