CVE-2020-14033

Name of the Vulnerable Software and Affected Versions janus-gateway versions through 0.10.0

Description A buffer overflow issue was discovered via a crafted RTSP server, specifically in the janus streaming rtsp parse sdp function within plugins/janus streaming.c. This issue can be exploited by a crafted RTSP server.

Recommendations For versions through 0.10.0, consider disabling the janus streaming rtsp parse sdp function as a temporary workaround until a patch is available. Restrict access to the plugins/janus streaming.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.