Log in Start free

Vulnerability · Published Jun 29, 2020 · Assigned by GitHub_M

CVE-2020-4067Improper Initialization in coturn

High 7.0

In plain English

A high-severity security flaw in coturn from coturn. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.0High
Exploit odds (30 days)1.9%top 20.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query coturn to get interesting bytes in the padding bytes from the connection of another client. This has been fixed in 4.5.1.3.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20coturn4.5.1.3-r0ALPINE-CVE-2020-4067
Alpine:v3.21coturn4.5.1.3-r0ALPINE-CVE-2020-4067
Alpine:v3.22coturn4.5.1.3-r0ALPINE-CVE-2020-4067
Alpine:v3.23coturn4.5.1.3-r0ALPINE-CVE-2020-4067
Alpine:v3.24coturn4.5.1.3-r0ALPINE-CVE-2020-4067
Debian:12coturn4.5.1.3-1DEBIAN-CVE-2020-4067
Debian:13coturn4.5.1.3-1DEBIAN-CVE-2020-4067
Debian:14coturn4.5.1.3-1DEBIAN-CVE-2020-4067

Affected products (as reported)

VendorProductVersions
coturn coturn >= 5.1.1, < 6.0.0

Weakness: CWE-665 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

References