CVE-2020-13901: Buffer Overflow
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janussdpmerge in sdp.c has a stack-based buffer overflow.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-13901?
CVE-2020-13901 is a vulnerability in janus-gateway (aka Janus WebRTC Server) through version 0.10.0 that allows for a stack-based buffer overflow in janus_sdp_merge function.
What is the severity of CVE-2020-13901?
The severity of CVE-2020-13901 is critical with a CVSS score of 9.8.
How does CVE-2020-13901 affect Meetecho Janus?
CVE-2020-13901 affects Meetecho Janus versions between 0.3.0 and 0.10.0.
How can I fix CVE-2020-13901?
To fix CVE-2020-13901, upgrade Meetecho Janus to version 0.10.0 or later.
Where can I find more information about CVE-2020-13901?
You can find more information about CVE-2020-13901 at the following references: [link to GitHub source code](https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L1248), [link to GitHub pull request](https://github.com/meetecho/janus-gateway/pull/2214), [link to proof-of-concept exploits](https://github.com/merrychap/poc_exploits/tree/master/janus-webrtc/CVE-2020-13901).