CVE-2020-10576: 
Linux Debian vulnerability analysis and mitigation

A race condition vulnerability was discovered in Janus through version 0.9.1, specifically in the VoiceMail plugin (plugins/janus_voicemail.c). The vulnerability was assigned CVE-2020-10576 and was disclosed in March 2020 (NVD, GitHub PR).

The vulnerability exists in the VoiceMail plugin of Janus and involves a race condition that could cause a server crash. The issue was discovered in the plugin's code which hadn't been extensively maintained since its initial creation. The vulnerability received a CVSS v3.1 Base Score of 5.9 (MEDIUM) with a vector string of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD).

The primary impact of this vulnerability is the potential for server crashes due to the race condition in the VoiceMail plugin. The vulnerability affects availability but does not impact confidentiality or integrity of the system (NVD).

The vulnerability was fixed in version 0.9.2 of Janus. The fix addresses both the race condition and associated memory leaks in the VoiceMail plugin. Users should upgrade to version 0.9.2 or later to mitigate this vulnerability (GitHub PR).