CVE-2020-10577
CVE-2020-10577
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions.
CVSS 4.8 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
janus Debian:12
- Affected ranges
- ECOSYSTEM: < 0.9.2-1
Update to 0.9.2-1
janus Debian:14
- Versions
- 0.2.2+dfsg-1
- 0.2.2+dfsg-2
- 0.2.2+dfsg-3
- 0.2.2+dfsg-4
- 0.2.2+dfsg-5~exp1
- 0.2.2+dfsg-5~exp2
- 0.2.2+dfsg-5~exp3
- 0.2.3-1
- 0.2.4-1
- 0.2.4-2
- 0.2.5-1
- 0.2.6-1
- 0.3.1-1
- 0.4.2-1
- 0.4.4-1
- 0.4.5-1
- 0.4.5-2
- 0.5.0-1
- 0.6.0-1
- 0.6.0-2
- 0.6.1-1
- 0.6.2-1
- 0.6.3-1
- 0.7.2-1
- 0.7.2-2
- 0.7.3-1
- 0.7.3-2
- 0.9.1+20200313-1
- 0.9.1-1
- 0.9.2-1~bpo10+1
- Affected ranges
- ECOSYSTEM: < 0.9.2-1
Update to 0.9.2-1
janus Ubuntu:18.04:LTS
- Versions
- 0.2.4-2
- 0.2.5-1
- 0.2.6-1
- 0.2.6-1build1
- 0.2.6-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
janus Ubuntu:20.04:LTS
- Versions
- 0.7.3-2
- 0.7.3-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published