ALT-PU-2020-2180-1
Closed vulnerabilities
Modified: 2024-11-21
CVE-2020-13898
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference.
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L120
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L123
- https://github.com/meetecho/janus-gateway/pull/2214
- https://github.com/merrychap/CVEs/tree/master/janus-webrtc/CVE-2020-13898
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L120
- https://github.com/merrychap/CVEs/tree/master/janus-webrtc/CVE-2020-13898
- https://github.com/meetecho/janus-gateway/pull/2214
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L123
Modified: 2024-11-21
CVE-2020-13899
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory.
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/janus.c#L1326
- https://github.com/meetecho/janus-gateway/pull/2214
- https://github.com/merrychap/poc_exploits/tree/master/janus-webrtc/CVE-2020-13899
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/janus.c#L1326
- https://github.com/merrychap/poc_exploits/tree/master/janus-webrtc/CVE-2020-13899
- https://github.com/meetecho/janus-gateway/pull/2214
Modified: 2024-11-21
CVE-2020-13900
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference.
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L64
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L74
- https://github.com/meetecho/janus-gateway/pull/2214
- https://github.com/merrychap/poc_exploits/tree/master/janus-webrtc/CVE-2020-13900
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L64
- https://github.com/merrychap/poc_exploits/tree/master/janus-webrtc/CVE-2020-13900
- https://github.com/meetecho/janus-gateway/pull/2214
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L74
Modified: 2024-11-21
CVE-2020-13901
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflow.
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L1248
- https://github.com/meetecho/janus-gateway/pull/2214
- https://github.com/merrychap/poc_exploits/tree/master/janus-webrtc/CVE-2020-13901
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L1248
- https://github.com/merrychap/poc_exploits/tree/master/janus-webrtc/CVE-2020-13901
- https://github.com/meetecho/janus-gateway/pull/2214
Modified: 2024-11-21
CVE-2020-14033
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_streaming_rtsp_parse_sdp in plugins/janus_streaming.c has a Buffer Overflow via a crafted RTSP server.
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/plugins/janus_streaming.c#L6117
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/plugins/janus_streaming.c#L6166
- https://github.com/meetecho/janus-gateway/pull/2229
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/plugins/janus_streaming.c#L6117
- https://github.com/meetecho/janus-gateway/pull/2229
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/plugins/janus_streaming.c#L6166
Modified: 2024-11-21
CVE-2020-14034
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_get_codec_from_pt in utils.c has a Buffer Overflow via long value in an SDP Offer packet.
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/utils.c#L381
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/utils.c#L401
- https://github.com/meetecho/janus-gateway/pull/2229
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/utils.c#L381
- https://github.com/meetecho/janus-gateway/pull/2229
- https://github.com/meetecho/janus-gateway/blob/v0.10.0/utils.c#L401