Race Condition in VideoCall Plugin Affects Janus by Meetecho
CVE-2020-10575

4.2MEDIUM

Key Information:

Vendor

Meetecho

Status
Janus
Vendor
CVE Published:
14 March 2020

What is CVE-2020-10575?

A race condition vulnerability has been identified in the VideoCall plugin of Janus, effective through version 0.9.1. This flaw compromises session management by prematurely or excessively freeing references, potentially leading to unintended behaviors or security concerns. Proper session handling is critical to maintain the integrity and stability of video communication applications.

References

https://github.com/meetecho/janus-gateway/pull/1994
x_refsource_MISC

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.