VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 19, 2020· Updated Jun 17, 2026

CVE-2020-6061

CVE-2020-6061

Description

An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. An attacker needs to send an HTTPS request to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Coturn/Coturn3 versions
    cpe:2.3:a:coturn_project:coturn:4.5.1.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:coturn_project:coturn:4.5.1.1:*:*:*:*:*:*:*
    • (no CPE)range: 4.5.1.1
    • (no CPE)range: CoTURN 4.5.1.1
  • Canonical/Ubuntu Linux4 versions
    cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • Fedoraproject/Fedora3 versions
    cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/coturn&distro=openSUSE%20Tumbleweed
    Range: < 4.5.2-2.2

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.