Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Vendor: coturn Component: Coturn Clear all filters
TI-2020-16083 CVE-2020-26262

Loopback bypass in Coturn

Priority LOW 35

Coturn is free open source implementation of TURN and STUN Server.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01547 Published 2021-01-13 Fixed in 4.5.2 CWE-441
TI-2020-03549 CVE-2020-4067

Improper Initialization in coturn

Priority LOW 37

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01898 Published 2020-06-29 Fixed in 6.0.0 CWE-665
TI-2020-04928 CVE-2020-6061 · GHSA-9vj8-fr5m-q39w

Out-of-bounds read in CoTURN

Priority MEDIUM 50

An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05116 Published 2020-02-19 No fix listed CWE-125
TI-2020-04929 CVE-2020-6062 · GHSA-8m27-48h2-7f6h

NULL pointer dereference in CoTURN

Priority MEDIUM 42

An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06102 Published 2020-02-19 No fix listed CWE-476
TI-2018-03026 CVE-2018-4059 · GHSA-7q4q-c7wp-55p8

Missing authorization in Talos coTURN

Priority MEDIUM 46

An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01897 Published 2019-03-21 No fix listed CWE-862
TI-2018-03024 CVE-2018-4056 · GHSA-c3pf-948r-8592

SQL injection in Talos coTURN

Priority MEDIUM 47

An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02955 Published 2019-02-05 No fix listed CWE-89