Vulnerabilities > CVE-2020-13899 - Missing Initialization of Resource vulnerability in Meetecho Janus 0.10.0/0.9.0/0.9.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
meetecho
CWE-909

Summary

An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory.

Vulnerable Configurations

Part Description Count
Application
Meetecho
3

Common Weakness Enumeration (CWE)