rpm package
opensuse/coturn&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/coturn&distro=openSUSE%20Tumbleweed
Vulnerabilities (22)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-4067 | Hig | 7.0 | < 4.5.2-2.2 | 4.5.2-2.2 | Jun 29, 2020 | In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query coturn to get interes | |
| CVE-2020-6061 | Cri | 9.8 | < 4.5.2-2.2 | 4.5.2-2.2 | Feb 19, 2020 | An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. An attacker needs to send an HTTPS request to trigger this vulnerabili |
- affected < 4.5.2-2.2fixed 4.5.2-2.2
In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query coturn to get interes
- affected < 4.5.2-2.2fixed 4.5.2-2.2
An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. An attacker needs to send an HTTPS request to trigger this vulnerabili
Page 2 of 2