CVE-2020-27523

Solstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers %x; %p; %c and %s in the screenkey, displayname, browsername, and operationsystem parameter during the authentication process. This may crash the server and force Solstice-Pod to reboot, which leads to a denial of...

CVE-2020-27523

CVE-2020-27523 affects Solstice-Pod (up to 5.0.2) WEBRTC server. The vulnerability arises from mishandling format-string specifiers (%x; %p; %c; %s) in authentication parameters (screen_key, display_name, browser_name, operation_system), which can crash the server and trigger a reboot, resulting ...

CVE-2020-27523: Use of Externally-Controlled Format String

Solstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers %x; %p; %c and %s in the screenkey, displayname, browsername, and operationsystem parameter during the authentication process. This may crash the server and force Solstice-Pod to reboot, which leads to a denial of...

PT-2020-16697

Name of the Vulnerable Software and Affected Versions Solstice-Pod versions up to 5.0.2 Description The Solstice-Pod WEBRTC server mishandles format-string specifiers %x, %p, %c, and %s in the screen key, display name, browser name, and operation system parameters during the authentication proces...

CVE-2020-14033

janus-gateway (Janus WebRTC Server)

CVE-2020-14034

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janusgetcodecfrompt in utils.c has a Buffer Overflow via long value in an SDP Offer packet...

Meetecho Janus Buffer Overflow Vulnerability

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A buffer overflow vulnerability exists in Meetecho Janus. A remote attacker could exploit this vulnerability to execute arbitrary code or cause the application to crash...

Meetecho Janus Code Issue Vulnerability (CNVD-2020-34717)

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A code issue vulnerability exists in Meetecho Janus. The vulnerability stems from an improperly designed or implemented code development process for a web system or product. Detailed vulnerability details are not availab...

CVE-2020-13900

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janussdppreparse in sdp.c has a NULL pointer dereference...

UBUNTU-CVE-2020-13899

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janusprocessincomingrequest in janus.c discloses information from uninitialized stack memory...

CVE-2020-13899

CVE-2020-13899 affects janus-gateway (Janus WebRTC Server) up to version 0.10.0. The vulnerability is in janus_process_incoming_request (janus.c), which discloses information from uninitialized stack memory. This constitutes an information disclosure issue with potential partial confidentiality i...

CVE-2020-13898

CVE-2020-13898 affects janus-gateway (Janus WebRTC Server) up to v0.10.0. The vulnerability is a NULL pointer dereference in janus_sdp_process (sdp.c). This implies potential crash or denial of service on handling SDP, with no public exploit details provided in the supplied documents. Connected s...

CVE-2020-13901: Out-of-bounds Write

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janussdpmerge in sdp.c has a stack-based buffer overflow...