CVE-2020-13898: Null Pointer Dereference
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janussdpprocess in sdp.c has a NULL pointer dereference.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-13898?
CVE-2020-13898 is a vulnerability discovered in janus-gateway, also known as Janus WebRTC Server, versions 0.9.0 through 0.10.0. It is identified as a NULL pointer dereference issue in the janus_sdp_process function in sdp.c.
What is the severity of CVE-2020-13898?
CVE-2020-13898 has a severity rating of 7.5 (high).
What is the affected software of CVE-2020-13898?
The affected software is Meetecho Janus, versions 0.9.0 through 0.10.0.
How can I fix the CVE-2020-13898 vulnerability?
To fix the CVE-2020-13898 vulnerability, it is recommended to update janus-gateway to version 0.10.1 or later, as this version contains a fix for the NULL pointer dereference issue.
Is there any additional information about CVE-2020-13898?
For additional information about CVE-2020-13898, you can refer to the following sources: [GitHub - janus-gateway](https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L120) and [GitHub Pull Request](https://github.com/meetecho/janus-gateway/pull/2214).