Known vulnerabilities in Janus WebRTC Server
Vendor:
Meetecho
Software:
Janus WebRTC Server
Software CPE:
cpe:2.3:a:meetecho:janus-gateway:*:*:*:*:*:*:*:*
Website:
https://www.meetecho.com/en/
Total vulnerabilities:
16
Public exploits:
4
Known exploited (KEV):
0
Breakdown by Severity Chart
0.16.3
1.4.3
0.16.2
1.4.2
1.4.1
0.16.1
1.4.0
0.16.0
1.3.3
0.15.3
1.3.2
0.15.2
1.3.1
0.15.1
1.3.0
0.15.0
1.2.4
0.14.4
1.2.3
0.14.3
1.2.2
0.14.2
1.2.1
0.14.1
1.2.0
0.14.0
1.1.4
0.13.4
1.1.3
0.13.3
1.1.2
0.13.2
1.1.1
0.13.1
1.1.0
0.13.0
1.0.4
0.12.4
1.0.3
0.12.3
1.0.2
0.12.2
1.0.1
0.12.1
1.0.0
0.12.0
0.11.8
0.11.7
0.11.6
0.11.5
0.11.4
0.11.3
0.11.2
0.11.1
0.10.10
0.10.9
0.10.8
0.10.7
0.10.6
0.10.5
0.10.4
0.10.3
0.10.2
0.10.1
0.10.0
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.2
0.8.1
0.8.0
0.7.6
0.7.5
0.7.4
0.7.3
0.7.2
0.7.1
0.7.0
0.6.3
0.6.2
0.6.1
0.6.0
0.5.0
0.4.5
0.4.4
0.4.3
0.4.2
0.4.1
0.3.1
0.3.0
0.2.6
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
0.1.2
0.1.1
0.1.0
0.0.9
Vulnerabilities (16)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU155753 - Use After Free |
CWE-416 | Medium | 0.16.3, 1.4.3 | 14.10.2026 |
SB2026101470 |
||
| #VU155751 - Stack-based buffer overflow |
CWE-121 | Medium | 0.16.3, 1.4.3 | 14.10.2026 |
SB2026101470 |
||
| #VU155752 - Heap-based Buffer Overflow |
CWE-122 | Medium | 0.16.3, 1.4.3 | 14.10.2026 |
SB2026101470 |
||
| #VU151866 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
CWE-22 | High | 0.16.2, 1.4.2 | 23.09.2026 |
SB2026092377 |
||
| #VU151864 - Server-Side Request Forgery (SSRF) |
CWE-918 | Medium | 0.16.2, 1.4.2 | 23.09.2026 |
SB2026092377 |
||
| #VU151865 - Server-Side Request Forgery (SSRF) |
CWE-918 | Medium | 0.16.2, 1.4.2 | 23.09.2026 |
SB2026092377 |
||
| #VU151863 - Out-of-bounds write |
CWE-787 | Low | 0.16.2, 1.4.2 | 23.09.2026 |
SB2026092377 |
||
| #VU151862 - Use After Free |
CWE-416 | Medium | 0.16.2, 1.4.2 | 23.09.2026 |
SB2026092377 |
||
| #VU151861 - Resource exhaustion |
CWE-400 | Low | 0.16.2, 1.4.2 | 23.09.2026 |
SB2026092377 |
||
| #VU151860 - NULL Pointer Dereference |
CWE-476 | Low | 0.16.2, 1.4.2 | 23.09.2026 |
SB2026092377 |
||
| #VU29936 - Out-of-bounds read CVE-2020-13899 |
CWE-125 | Medium | 0.10.1 | 15.07.2020 |
SB2020061118 |
||
| #VU29935 - Memory corruption CVE-2020-14034 |
CWE-119 | High | 0.10.1 | 15.07.2020 |
SB2020061118 |
||
| #VU29934 - Memory corruption CVE-2020-14033 |
CWE-119 | High | 0.10.1 | 15.07.2020 |
SB2020061118 |
||
| #VU29933 - Out-of-bounds write CVE-2020-13901 |
CWE-787 | High | 0.10.1 | 15.07.2020 |
SB2020061118 |
||
| #VU29932 - NULL Pointer Dereference CVE-2020-13900 |
CWE-476 | Medium | 0.10.1 | 15.07.2020 |
SB2020061118 |
||
| #VU29931 - NULL Pointer Dereference CVE-2020-13898 |
CWE-476 | Medium | 0.10.1 | 15.07.2020 |
SB2020061118 |