CVE-2023-39214: 
NixOS vulnerability analysis and mitigation

CVE-2023-39214 is a security vulnerability discovered in Zoom Client SDK versions before 5.15.5. The vulnerability was disclosed on August 8, 2023, and affects multiple platforms including Linux, macOS, Windows, Android, and iOS versions of the Zoom Client SDK and related products (NVD).

The vulnerability is classified as an exposure of sensitive information that could lead to denial of service attacks. It has received a CVSS v3.1 base score of 8.1 (HIGH) from NIST with a vector string of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H. Zoom Video Communications assessed it with a slightly lower CVSS score of 7.6 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H. The vulnerability is associated with CWE-668 (Exposure of Resource to Wrong Sphere) and CWE-749 (Exposed Dangerous Method or Function) (NVD).

The vulnerability could allow an authenticated user to cause a denial of service through network access. Additionally, it involves exposure of sensitive information, potentially compromising system security (NVD).

Users are advised to update to Zoom Client SDK version 5.15.5 or later to address this vulnerability. This affects multiple platforms including Linux, macOS, Windows, Android, and iOS versions (NVD).