Vulnerabilities > CVE-2020-13898 - NULL Pointer Dereference vulnerability in Meetecho Janus 0.10.0/0.9.0/0.9.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
meetecho
CWE-476

Summary

An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference.

Vulnerable Configurations

Part Description Count
Application
Meetecho
3

Common Weakness Enumeration (CWE)