CVE-2020-10577: Race Condition
Published Mar 14, 2020
·Updated
An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions.
Affected Software
1 affected component
meetecho janus<=0.9.1
Remediation
Patch Available
Event History
Mar 14, 2020
CVE Published
via MITRE·07:07 PM
Data Sourced
via MITRE·07:07 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-10577?
The severity of CVE-2020-10577 is medium (4.8).
2
What is the affected software of CVE-2020-10577?
The affected software of CVE-2020-10577 is Meetecho Janus version 0.9.1.
3
What is the vulnerability description of CVE-2020-10577?
CVE-2020-10577 is a vulnerability in Janus where multiple concurrent threads misuse the source property of a session, leading to a race condition when claiming sessions.
4
How can I fix CVE-2020-10577?
To fix CVE-2020-10577, update to a version of Janus later than 0.9.1.
5
Where can I find more information about CVE-2020-10577?
You can find more information about CVE-2020-10577 at the following link: https://github.com/meetecho/janus-gateway/pull/1990