Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4415-1
HistoryJul 06, 2020 - 12:00 a.m.

coTURN vulnerabilities

2020-07-0600:00:00
ubuntu.com
44

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 19.10
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • coturn - TURN and STUN server for VoIP

Details

Felix Dörre discovered that coTURN response buffer is not initialized properly.
An attacker could possibly use this issue to obtain sensitive information.
(CVE-2020-4067)

It was discovered that coTURN web server incorrectly handled HTTP POST requests.
An attacker could possibly use this issue to cause a denial of service, obtain
sensitive information or other unspecified impact.
(CVE-2020-6061, CVE-2020-6062)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchcoturn< 4.5.1.1-1.1ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchcoturn-dbgsym< 4.5.1.1-1.1ubuntu0.20.04.1UNKNOWN
Ubuntu19.10noarchcoturn< 4.5.1.1-1.1ubuntu0.19.10.1UNKNOWN
Ubuntu19.10noarchcoturn-dbgsym< 4.5.1.1-1.1ubuntu0.19.10.1UNKNOWN
Ubuntu18.04noarchcoturn< 4.5.0.7-1ubuntu2.18.04.2UNKNOWN
Ubuntu18.04noarchcoturn-dbgsym< 4.5.0.7-1ubuntu2.18.04.2UNKNOWN
Ubuntu16.04noarchcoturn< 4.5.0.3-1ubuntu0.3UNKNOWN
Ubuntu16.04noarchcoturn-dbgsym< 4.5.0.3-1ubuntu0.3UNKNOWN

Related

osv 5
debian 3
openvas 13
nessus 9
fedora 5
altlinux 1
mageia 2
talosblog 1
hackerone 1
nvd 3
talos 2
prion 3
ubuntucve 3
cvelist 3
debiancve 3
cve 3
checkpoint_advisories 1
freebsd 1
suse 1
alpinelinux 1
veracode 1
osv
osv
coturn - security update
2020-06-29 00:00:00
CVE-2020-6062
2020-02-19 19:15:12
CVE-2020-6061
2020-02-19 19:15:12
debian
debian
[SECURITY] [DSA 4711-1] coturn security update
2020-06-29 16:15:28
[SECURITY] [DSA 4711-1] coturn security update
2020-06-29 16:15:28
[SECURITY] [DLA 2271-1] coturn security update
2020-07-01 12:32:12
openvas
openvas
Ubuntu: Security Advisory (USN-4415-1)
2020-07-07 00:00:00
Debian: Security Advisory (DSA-4711-1)
2020-06-30 00:00:00
Fedora: Security Advisory for coturn (FEDORA-2020-305c173af8)
2020-04-03 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : coTURN vulnerabilities (USN-4415-1)
2020-07-07 00:00:00
Debian DSA-4711-1 : coturn - security update
2020-06-30 00:00:00
Fedora 30 : coturn (2020-f3fcb1608a)
2020-04-02 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: coturn-4.5.1.1-3.fc30
2020-04-01 02:36:37
[SECURITY] Fedora 31 Update: coturn-4.5.1.1-3.fc31
2020-04-01 01:56:10
[SECURITY] Fedora 32 Update: coturn-4.5.1.1-3.fc32
2020-04-01 16:35:10
altlinux
altlinux
Security fix for the ALT Linux 9 package coturn version 4.5.1.1-alt2
2020-05-07 00:00:00
mageia
mageia
Updated coturn packages fix security vulnerability
2020-06-11 02:59:36
Updated coturn packages fix security vulnerability
2020-07-10 11:01:08
talosblog
talosblog
Vulnerability Spotlight: Memory corruption, DoS vulnerabilities in CoTURN
2020-02-18 09:07:14
hackerone
hackerone
8x8: Outdated Coturn is vulnerable to known vulnerabilities (High)
2020-04-08 14:48:06
nvd
nvd
CVE-2020-6062
2020-02-19 19:15:12
CVE-2020-6061
2020-02-19 19:15:12
CVE-2020-4067
2020-06-29 20:15:10
talos
talos
CoTURN HTTP Server POST-parsing information leak vulnerability
2020-02-18 00:00:00
CoTURN HTTP Server POST-parsing denial-of-service vulnerability
2020-02-18 00:00:00
prion
prion
Heap overflow
2020-02-19 19:15:00
Design/Logic Flaw
2020-02-19 19:15:00
Design/Logic Flaw
2020-06-29 20:15:00
ubuntucve
ubuntucve
CVE-2020-6062
2020-02-19 00:00:00
CVE-2020-6061
2020-02-19 00:00:00
CVE-2020-4067
2020-06-29 00:00:00
cvelist
cvelist
CVE-2020-6062
2020-02-19 18:25:22
CVE-2020-6061
2020-02-19 18:27:20
CVE-2020-4067 Improper Initialization in coturn
2020-06-29 19:55:13
debiancve
debiancve
CVE-2020-6062
2020-02-19 19:15:12
CVE-2020-6061
2020-02-19 19:15:12
CVE-2020-4067
2020-06-29 20:15:10
cve
cve
CVE-2020-6062
2020-02-19 19:15:12
CVE-2020-6061
2020-02-19 19:15:12
CVE-2020-4067
2020-06-29 20:15:10
checkpoint_advisories
checkpoint_advisories
CoTURN Heap Overflow (CVE-2020-6061)
2020-07-08 00:00:00
freebsd
freebsd
coturn -- information leakage
2020-06-30 00:00:00
suse
suse
Security update for coturn (moderate)
2020-07-07 00:00:00
alpinelinux
alpinelinux
CVE-2020-4067
2020-06-29 20:15:10
veracode
veracode
Information Disclosure
2020-08-06 21:33:18

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON
Related for USN-4415-1
osv5debian3openvas13nessus9fedora5altlinux1mageia2talosblog1hackerone1nvd3talos2prion3ubuntucve3cvelist3debiancve3cve3checkpoint_advisories1freebsd1suse1alpinelinux1veracode1