CVE-2020-10575: Race Condition
Published Mar 14, 2020
·Updated
An issue was discovered in Janus through 0.9.1. plugins/janusvideocall.c in the VideoCall plugin mishandles session management because a race condition causes some references to be freed too early or too many times.
Affected Software
1 affected component
meetecho janus<=0.9.1
Remediation
Patch Available
Event History
Mar 14, 2020
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
Description
Frequently Asked Questions
1
What is CVE-2020-10575?
CVE-2020-10575 is a vulnerability in Janus through 0.9.1 that mishandles session management in the VideoCall plugin.
2
What is the severity of CVE-2020-10575?
CVE-2020-10575 has a severity of medium with a CVSS score of 4.2.
3
How does CVE-2020-10575 affect Meetecho Janus?
CVE-2020-10575 affects Meetecho Janus version 0.9.1 and earlier.
4
How can I fix CVE-2020-10575?
To fix CVE-2020-10575, update Janus to version 0.9.2 or later.
5
Where can I find more information about CVE-2020-10575?
More information about CVE-2020-10575 can be found at the following link: https://github.com/meetecho/janus-gateway/pull/1994