Read the docs

coturn

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

coturn records in CISA KEV

No coturn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Coturn 14 records HIGH

Records

14 records in Coturn · all components

TI-2020-04928 CVE-2020-6061 · GHSA-9vj8-fr5m-q39w

Out-of-bounds read in CoTURN

Priority MEDIUM 50

An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05116 Published 2020-02-19 No fix listed CWE-125
TI-2018-03024 CVE-2018-4056 · GHSA-c3pf-948r-8592

SQL injection in Talos coTURN

Priority MEDIUM 47

An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02955 Published 2019-02-05 No fix listed CWE-89
TI-2018-03026 CVE-2018-4059 · GHSA-7q4q-c7wp-55p8

Missing authorization in Talos coTURN

Priority MEDIUM 46

An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01897 Published 2019-03-21 No fix listed CWE-862
TI-2020-04929 CVE-2020-6062 · GHSA-8m27-48h2-7f6h

NULL pointer dereference in CoTURN

Priority MEDIUM 42

An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06102 Published 2020-02-19 No fix listed CWE-476
TI-2020-03549 CVE-2020-4067

Improper Initialization in coturn

Priority LOW 37

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01898 Published 2020-06-29 Fixed in 6.0.0 CWE-665
TI-2020-16083 CVE-2020-26262

Loopback bypass in Coturn

Priority LOW 35

Coturn is free open source implementation of TURN and STUN Server.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01547 Published 2021-01-13 Fixed in 4.5.2 CWE-441
Open these records in search →