CVE-2020-14033

概要

参考情報

• meetecho/janus-gateway · Patch
• meetecho/janus-gateway · Patch
• meetecho/janus-gateway#2229 · Third Party Advisory

janus のその他の脆弱性

• CVE-2021-4124中 6.1janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-4020中 5.4janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2020-14034緊急 9.8An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_get_codec_from_pt in utils.c has a Buffer Overflow …
• CVE-2020-13901緊急 9.8An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflo…
• CVE-2020-13900高 7.5An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereferenc…