Buffer Overflow in Janus WebRTC Server Affects Multiple Versions
CVE-2020-14033

9.8CRITICAL

Key Information:

Vendor: Meetecho
Status: Janus
Vendor: CVE Published:; 15 June 2020

What is CVE-2020-14033?

The Janus WebRTC Server has a vulnerability in the janus_streaming_rtsp_parse_sdp function, allowing for a buffer overflow when processing specially crafted RTSP server inputs. This issue can lead to potential denial-of-service scenarios or even execution of arbitrary code. The vulnerability affects versions up to 0.10.0 of the Janus WebRTC Server, posing risks for deployments that rely on seamless media streaming.