ID:3070 - Exploit for Out-of-bounds read in Janus WebRTC Server - CVE-2020-13899

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in "janus_process_incoming_request" in "janus.c" file. A remote attacker can trigger out-of-bounds read error and read contents of memory on the system.

Remediation