DEBIAN-CVE-2026-108830

Source
https://security-tracker.debian.org/tracker/CVE-2026-108830
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-108830.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-108830
Upstream
Published
2026-10-12T12:17:14Z
Modified
2026-10-14T10:00:22Z
Severity
  • 1.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
Summary
[none]
Details

A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janus_videoroom.c of the component VideoRoom. This manipulation causes race condition. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. Patch name: 27c0d1af888153e818675b56a4e6267f62d57097. Applying a patch is the recommended action to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

References

Affected packages

Debian:12 / janus

Package

Name
janus
Purl
pkg:deb/debian/janus?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.1.2-1
1.1.2-1.1
1.1.2-1.2
1.1.2-2
1.1.2-3
1.1.2-3.1
1.1.2-4
1.4.1+ds-1
1.4.1+ds-2
1.4.1+ds-3
1.4.1+ds-4

Ecosystem specific

{
    "urgency":  "not yet assigned"
}

Database specific

source
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-108830.json"

Debian:14 / janus

Package

Name
janus
Purl
pkg:deb/debian/janus?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.2.2+dfsg-1
0.2.2+dfsg-2
0.2.2+dfsg-3
0.2.2+dfsg-4
0.2.2+dfsg-5~exp1
0.2.2+dfsg-5~exp2
0.2.2+dfsg-5~exp3
0.2.3-1
0.2.4-1
0.2.4-2
0.2.5-1
0.2.6-1
0.3.1-1
0.4.2-1
0.4.4-1
0.4.5-1
0.4.5-2
0.5.0-1
0.6.0-1
0.6.0-2
0.6.1-1
0.6.2-1
0.6.3-1
0.7.2-1
0.7.2-2
0.7.3-1
0.7.3-2
0.9.1-1
0.9.1+20200313-1
0.9.2-1~bpo10+1
0.9.2-1
0.9.3-1
0.9.4-1
0.9.5-1
0.10.0-1
0.10.1-1
0.10.2-1
0.10.3-1
0.10.4-1
0.10.5-1
0.10.6-1
0.10.7-1
0.10.8-1
0.10.8-2
0.10.9-1
0.10.9-2
0.11.1-1
0.11.2-1
0.11.3-1~exp1
0.11.4-1
0.11.5-1
0.11.5-2
0.11.5-3
0.11.5-4
0.11.6-1~bpo11+1
0.11.6-1
0.11.7-1~bpo11+1
0.11.7-1
0.11.8-1~bpo11+1
0.11.8-1
0.11.8-2
0.11.8-3~bpo11+1
0.11.8-3
0.12.0-1
1.*
1.0.0-1
1.0.0-2
1.0.0-3
1.0.0-4~bpo11+1
1.0.0-4
1.0.1-1~bpo11+1
1.0.1-1
1.0.2-1
1.0.4-1
1.1.0-1
1.1.1-1
1.1.2-1
1.1.2-1.1
1.1.2-1.2
1.1.2-2
1.1.2-3
1.1.2-3.1
1.1.2-4
1.4.1+ds-1
1.4.1+ds-2
1.4.1+ds-3
1.4.1+ds-4

Ecosystem specific

{
    "urgency":  "not yet assigned"
}

Database specific

source
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-108830.json"