CVE-2020-6061

2020-02-1919:15:12

Google

osv.dev

6.3 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.6%

JSON

An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. An attacker needs to send an HTTPS request to trigger this vulnerability.

CPENameOperatorVersion
coturnequpstream/4.5.0.5
coturnequpstream/4.0.0.2
coturnequpstream/4.4.5.2
coturneq4.5.0.3
coturnequpstream/4.1.2.1
coturnequpstream/4.0.1.2
coturneq4.5.0.5
coturnequpstream/4.3.1.3
coturnequpstream/4.2.2.2
coturnequpstream/4.4.1.2

Name	Operator	Version
coturn	eq	upstream/4.5.0.5
coturn	eq	upstream/4.0.0.2
coturn	eq	upstream/4.4.5.2
coturn	eq	4.5.0.3
coturn	eq	upstream/4.1.2.1
coturn	eq	upstream/4.0.1.2
coturn	eq	4.5.0.5
coturn	eq	upstream/4.3.1.3
coturn	eq	upstream/4.2.2.2
coturn	eq	upstream/4.4.1.2