CVE-2020-14033: 
Linux Debian vulnerability analysis and mitigation

An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. The janus_streaming_rtsp_parse_sdp function in plugins/janus_streaming.c has a Buffer Overflow vulnerability via a crafted RTSP server. This vulnerability was discovered by Marat Gayanov at Digital Security (dsec.ru) and was disclosed on June 15, 2020 (NVD).

The vulnerability exists in the janus_streaming_rtsp_parse_sdp function within the streaming plugin of Janus WebRTC Server. The issue stems from improper usage of sscanf that could lead to a buffer overflow condition when parsing SDP from an RTSP server. The vulnerability has been assigned a CVSS v3.1 score of 9.8 (CRITICAL) (NVD).

If successfully exploited, this buffer overflow vulnerability could allow an attacker to potentially execute arbitrary code or cause a denial of service condition through a crafted RTSP server connection (NVD).

The vulnerability requires an attacker to set up a malicious RTSP server that sends crafted SDP data to a Janus WebRTC Server instance that attempts to connect to it. The issue was fixed in version 0.10.1 and later releases (GitHub PR).

The recommended mitigation is to upgrade to Janus WebRTC Server version 0.10.1 or later which contains the fix for this vulnerability. The fix involved correcting the improper usage of sscanf in the affected code (GitHub PR).