CVE-2023-49646: 
NixOS vulnerability analysis and mitigation

CVE-2023-49646 is a vulnerability discovered in Zoom clients before version 5.16.5. The vulnerability was disclosed on December 13, 2023, and affects multiple Zoom client applications including Windows, macOS, iOS, Android, Linux, VDI clients, and Zoom SDKs (Zoom Advisory).

The vulnerability is classified as an improper authentication issue with a CVSS v3.1 Base Score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The weakness is categorized under CWE-287 (Improper Authentication) and CWE-347 (Improper Verification of Cryptographic Signature) (NVD).

The vulnerability allows an authenticated user to conduct a denial of service attack via network access, potentially affecting the availability of Zoom services (Zoom Advisory).

The vulnerability requires network access and authenticated user privileges to exploit. No public exploits have been reported at the time of disclosure (NVD).

Users are advised to update to Zoom version 5.16.5 or later to mitigate this vulnerability. The fix is available through the official Zoom download page at https://zoom.us/download (Zoom Advisory).