Race Condition Vulnerability in Janus VoiceMail Plugin
CVE-2020-10576

5.9MEDIUM

Key Information:

Vendor

Meetecho

Status
Janus
Vendor
CVE Published:
14 March 2020

What is CVE-2020-10576?

A race condition vulnerability has been identified in the VoiceMail plugin of the Janus Gateway, present in versions up to 0.9.1. This issue could potentially allow an attacker to manipulate the timing of processes, resulting in a server crash. By exploiting this flaw, unauthorized users could disrupt services, leading to a denial of service and compromising the stability of the affected systems.

References

https://github.com/meetecho/janus-gateway/pull/1993
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.