CVE-2020-13900: Null Pointer Dereference
Published Jun 10, 2020
·Updated
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janussdppreparse in sdp.c has a NULL pointer dereference.
Affected Software
1 affected component
meetecho janus>=0.9.0<=0.10.0
Remediation
Patch Available
Event History
Jun 10, 2020
CVE Published
via MITRE·09:07 PM
Data Sourced
via MITRE·09:07 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-13900?
The severity of CVE-2020-13900 is high.
2
What is the affected software for CVE-2020-13900?
The affected software for CVE-2020-13900 is Meetecho Janus version 0.9.0 to 0.10.0.
3
What is the vulnerability in janus_sdp_preparse?
The vulnerability in janus_sdp_preparse is a NULL pointer dereference in sdp.c.
4
How can I fix the vulnerability in janus-gateway?
To fix the vulnerability in janus-gateway, update to version 0.10.1 or later.
5
Where can I find more information about CVE-2020-13900?
You can find more information about CVE-2020-13900 in the following references: [Link 1](https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L64), [Link 2](https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L74), [Link 3](https://github.com/meetecho/janus-gateway/pull/2214).