CVE:CVE-2021-34418
CNNVD:CNNVD-202111-1094
ZOOM Zoom Call Recording等都是美国Zoom（ZOOM）公司的产品。Zoom Call Recording是一套可扩展的会话记录管理解决方案。ZOOM on-premise Meeting Connector是一款会议连接器。Zoom On-​​Premise Meeting Connector Controller等都是美国Zoom公司的产品。Zoom On-​​Premise Meeting Connector Controller是一个内部部署的会议连接器。
Zoom 多款产品存在安全漏洞，该漏洞源于无法验证在身份验证时是否发送了 NULL 字节。 这可能会导致登录服务崩溃。以下产品和版本受到影响：Zoom On-Premise Meeting Connector Controller before version 4.6.239.20200613，Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613，Zoom On-Premise Recording Connector before version 3.8.42.20200905，Zoom On-Premise Virtual Room Connector before version 4.4.6344.20200612，Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5492.20200616。
solution:Upgrade zoom zoom_on-premise_meeting_connector_controller to a higher version than 4.6.239.20200613,and avoid the version (,4.6.239.20200613); Upgrade zoom zoom_on-premise_meeting_connector_mmr to a higher version than 4.6.239.20200613,and avoid the version (,4.6.239.20200613); Upgrade zoom zoom_on-premise_recording_connector to a higher version than 3.8.42.20200905,and avoid the version (,3.8.42.20200905); Upgrade zoom zoom_on-premise_virtual_room_connector to a higher version than 4.4.6344.20200612,and avoid the version (,4.4.6344.20200612); Upgrade zoom zoom_on-premise_virtual_room_connector_load_balancer to a higher version than 2.5.5492.20200616,and avoid the version (,2.5.5492.20200616)