Buffer Overflow in Janus WebRTC Server Affects Various Versions
CVE-2020-14034

9.8CRITICAL

Key Information:

Vendor: Meetecho
Status: Janus
Vendor: CVE Published:; 15 June 2020

What is CVE-2020-14034?

A vulnerability exists in Janus WebRTC Server, specifically in the function janus_get_codec_from_pt located in utils.c. This vulnerability is triggered by a buffer overflow that occurs while processing a long value in an SDP Offer packet. When exploited, it can lead to unexpected behavior or potential system crashes, emphasizing the need for timely patching and security assessments for users operating on affected versions.