rpm package
opensuse/coturn&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/coturn&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-27624 | Hig | 7.2 | < 4.14.0-bp160.1.1 | 4.14.0-bp160.1.1 | Feb 25, 2026 | Coturn is a free open source implementation of TURN and STUN Server. Coturn is commonly configured to block loopback and internal ranges using "denied-peer-ip" and/or default loopback restrictions. CVE-2020-26262 addressed bypasses involving "0.0.0.0", "[::1]" and "[::]", but IPv | |
| CVE-2025-69217 | Hig | 7.7 | < 4.14.0-bp160.1.1 | 4.14.0-bp160.1.1 | Dec 30, 2025 | coturn is a free open source implementation of TURN and STUN Server. Versions 4.6.2r5 through 4.7.0-r4 have a bad random number generator for nonces and port randomization after refactoring. Additionally, random numbers aren't generated with openssl's RAND_bytes but libc's random |
- affected < 4.14.0-bp160.1.1fixed 4.14.0-bp160.1.1
Coturn is a free open source implementation of TURN and STUN Server. Coturn is commonly configured to block loopback and internal ranges using "denied-peer-ip" and/or default loopback restrictions. CVE-2020-26262 addressed bypasses involving "0.0.0.0", "[::1]" and "[::]", but IPv
- affected < 4.14.0-bp160.1.1fixed 4.14.0-bp160.1.1
coturn is a free open source implementation of TURN and STUN Server. Versions 4.6.2r5 through 4.7.0-r4 have a bad random number generator for nonces and port randomization after refactoring. Additionally, random numbers aren't generated with openssl's RAND_bytes but libc's random