Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2021-34418

Pre-auth Null pointer crash in on-premise web console

Description

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector before version 3.8.42.20200905, Zoom On-Premise Virtual Room Connector before version 4.4.6344.20200612, and Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5492.20200616 fails to validate that a NULL byte was sent while authenticating. This could lead to a crash of the login service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zoom Video Communications Inc Zoom On-Premise Meeting Connector

  • unspecified to < 4.6.239.20200613affected

Zoom Video Communications Inc Zoom On-Premise Meeting Connector MMR

  • unspecified to < 4.6.239.20200613affected

Zoom Video Communications Inc Zoom On-Premise Recording Connector

  • unspecified to < 3.8.42.20200905affected

Zoom Video Communications Inc Zoom On-Premise Virtual Room Connector

  • unspecified to < 4.4.6344.20200612affected

Zoom Video Communications Inc Zoom On-Premise Virtual Room Connector Load Balancer

  • unspecified to < 2.5.5492.20200616affected

References