CVE-2020-13898

概要

参考情報

• meetecho/janus-gateway · Third Party Advisory
• meetecho/janus-gateway · Third Party Advisory
• meetecho/janus-gateway#2214 · Patch
• merrychap/CVEs · Exploit

janus のその他の脆弱性

• CVE-2021-4124中 6.1janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-4020中 5.4janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2020-14034緊急 9.8An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_get_codec_from_pt in utils.c has a Buffer Overflow …
• CVE-2020-14033緊急 9.8An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_streaming_rtsp_parse_sdp in plugins/janus_streaming…
• CVE-2020-13901緊急 9.8An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflo…