ZC crash using a PDU which causes many allocations

  • ZSB-21011
  • CVE-2021-34415
  • High
  • 7.5
  • CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in incoming network packets, which leads to exhaustion of resources and system crash.

  • Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205

Reported by Nikita Abramov of Positive Technologies

Revision Date Description
1.0 09/30/2021

Initial Publication