CVE-2020-14034

概要

参考情報

• meetecho/janus-gateway · Patch
• meetecho/janus-gateway · Patch
• meetecho/janus-gateway#2229 · Third Party Advisory

janus のその他の脆弱性

• CVE-2021-4124中 6.1janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-4020中 5.4janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2020-14033緊急 9.8An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_streaming_rtsp_parse_sdp in plugins/janus_streaming…
• CVE-2020-13901緊急 9.8An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflo…
• CVE-2020-13900高 7.5An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereferenc…