CVE-2020-14034: Buffer Overflow
Published Jun 15, 2020
·Updated
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janusgetcodecfrompt in utils.c has a Buffer Overflow via long value in an SDP Offer packet.
Affected Software
1 affected component
meetecho janus<=0.10.0
Remediation
Event History
Jun 15, 2020
CVE Published
via MITRE·04:10 PM
Data Sourced
via MITRE·04:10 PM
Description
Frequently Asked Questions
1
What is CVE-2020-14034?
CVE-2020-14034 is a vulnerability discovered in janus-gateway (aka Janus WebRTC Server) through version 0.10.0. It allows for a buffer overflow via a long value in an SDP Offer packet.
2
What is the severity of CVE-2020-14034?
The severity of CVE-2020-14034 is critical with a severity score of 9.8 out of 10.
3
Which software is affected by CVE-2020-14034?
The Meetecho Janus software with versions up to and including 0.10.0 is affected by CVE-2020-14034.
4
How can I fix CVE-2020-14034?
To fix CVE-2020-14034, upgrade janus-gateway to a version higher than 0.10.0.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-14034?
The Common Weakness Enumeration (CWE) ID for CVE-2020-14034 is CWE-119 and CWE-120.