CVE-2020-14033: Buffer Overflow
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janusstreamingrtspparsesdp in plugins/janusstreaming.c has a Buffer Overflow via a crafted RTSP server.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-14033?
CVE-2020-14033 is an issue discovered in janus-gateway (aka Janus WebRTC Server) through version 0.10.0, involving a Buffer Overflow vulnerability in the janus_streaming_rtsp_parse_sdp function.
What is the severity of CVE-2020-14033?
The severity of CVE-2020-14033 is critical, with a severity score of 9.8.
How does CVE-2020-14033 affect the software?
CVE-2020-14033 affects Meetecho Janus version 0.10.0 and earlier versions.
What is the CWE classification of CVE-2020-14033?
CVE-2020-14033 is classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')).
How can I fix CVE-2020-14033?
To fix CVE-2020-14033, it is recommended to update janus-gateway to a version beyond 0.10.0.