MGASA-2020-0287 Updated coturn packages fix security vulnerability

The updated package fixes a security vulnerability: In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client an attacker could use their connection to...

Fedora 31 : coturn (2020-9eadf517de)

Coturn 4.5.1.3 ============== - merge PR 575: Fix rpm packaging - merge PR 576: Tell tar to not include the metadata into release - merge PR 574: Change Docker turnserver.conf to latest turnserver.conf - merge PR 566: Remove reference to SSLv3 - merge PR 579: Ignore MD5 for BoringSSL - merge PR...

Fedora 32 : coturn (2020-d946f64eea)

Coturn 4.5.1.3 ============== - merge PR 575: Fix rpm packaging - merge PR 576: Tell tar to not include the metadata into release - merge PR 574: Change Docker turnserver.conf to latest turnserver.conf - merge PR 566: Remove reference to SSLv3 - merge PR 579: Ignore MD5 for BoringSSL - merge PR...

openSUSE: Security Advisory for coturn (openSUSE-SU-2020:0937-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : coTURN vulnerabilities (USN-4415-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4415-1 advisory. Felix Drre discovered that coTURN response buffer is not initialized properly. An attacker could possibly use this issue to obtai...

Ubuntu: Security Advisory (USN-4415-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

coturn < 4.5.1.3 Information Disclosure Vulnerability

coturn is prone to an information disclosure vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

UBUNTU-CVE-2020-4067

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client an attacker could use their connection to intelligently query coturn to get interesting bytes in the...

CVE-2020-4067 Improper Initialization in coturn

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client an attacker could use their connection to intelligently query coturn to get interesting bytes in the...

CVE-2020-4067

In coturn, version 4.5.1.3 and earlier contains a vulnerability where the STUN/TURN response buffer is not initialized properly, allowing an attacker to leak information between distinct client connections by querying padding bytes. This is a consequence of an uninitialized memory region in the r...

[SECURITY] [DSA 4711-1] coturn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4711-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 29, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4711-1] coturn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4711-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 29, 2020 https://www.debian.org/security/faq -...

CVE-2009-4067

CVE-2009-4067 : A buffer overflow in the Auerswald Linux USB driver (function auerswald_probe ) for the Linux kernel is exploitable on kernel versions before 2.6.27. The vulnerability allows physically proximate attackers to execute arbitrary code, cause a denial of service, or take full control ...

Ubuntu 16.04 LTS : Evince vulnerability (USN-4067-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4067-1 advisory. It was discovered that Evince incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service or to execute arbitrar...

CVE-2019-4067

IBM Intelligent Operations Center IOC 5.1.0 through 5.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 157012...

CVE-2019-4067

IBM Intelligent Operations Center IOC 5.1.0 through 5.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 157012...

CVE-2019-4067

CVE-2019-4067 affects IBM Intelligent Operations Center (IOC) versions 5.1.0–5.2.0 (and related components). The root cause is that by default the product does not require strong passwords, which can enable credential abuse via brute-force attempts, particularly when LDAP user registries are used...

Security Bulletin: User passwords might be obtained by a brute force attack on IBM® Intelligent Operations Center (CVE-2019-4067)

Summary If your IBM® Intelligent Operations Center system is configured to use a Lightweight Directory Access Protocol LDAP user registry, user passwords might be obtained by a brute force attack that uses HTTP basic authentication requests to IBM Intelligent Operations Center. Vulnerability...

CVE-2018-4067

CVE-2018-4067 is an information-disclosure vulnerability in the ACEManager template_load.cgi of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted authenticated HTTP request can cause a leak of internal file paths and files. The Red Hat and CNVD entries mirror the same description, and C...

Sierra Wireless AirLink ES450 ACEManager template_load.cgi Information Disclosure Exploit

An exploitable information disclosure vulnerability exists in the ACEManager templateload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an...