CVE-2020-13899

High

An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses…

mitre·CWE-908·Published 2020-06-10

CVSS

7.5

EPSS

0.02

KEV

Exploits

cve.orgen

179 chars

An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory.

NVDen

179 chars

An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory.

Se detectó un problema en janus-gateway (también se conoce como Janus WebRTC Server) versiones hasta 0.10.0. La función janus_process_incoming_request en el archivo janus.c revela información desde la memoria de pila no inicializada

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N