CVE-2020-13899: High severity meetecho janus vulnerability
Published Jun 10, 2020
·Updated
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janusprocessincomingrequest in janus.c discloses information from uninitialized stack memory.
Affected Software
1 affected component
meetecho janus>=0.9.0<=0.10.0
Remediation
Patch Available
Event History
Jun 10, 2020
CVE Published
via MITRE·09:05 PM
Data Sourced
via MITRE·09:05 PM
Description
Frequently Asked Questions
1
What is CVE-2020-13899?
CVE-2020-13899 is a vulnerability in janus-gateway that allows disclosure of information from uninitialized stack memory.
2
How severe is CVE-2020-13899?
CVE-2020-13899 has a severity score of 7.5, which is considered high.
3
Which software versions are affected by CVE-2020-13899?
The versions of janus-gateway from 0.9.0 to 0.10.0 are affected by CVE-2020-13899.
4
How can I fix CVE-2020-13899?
To fix CVE-2020-13899, you should update janus-gateway to a version that is not affected, such as 0.10.1 or later.
5
Where can I find more information about CVE-2020-13899?
You can find more information about CVE-2020-13899 on the GitHub page of janus-gateway and the related pull request, as well as on a PoC exploits repository.