55 matches found
SUSE CVE-2026-73215
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnportsallocateeven in src/apps/relay/turnports.c marks the unused odd sibling port as TPSTAKENODD for an EVEN-PORT Allocate request with reservation bit R=0 even though no RTCP socket will release it, allowin...
SUSE CVE-2026-73216
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...
CVE-2026-73216
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...
CVE-2026-73216
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...
UBUNTU-CVE-2026-73216
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...
CVE-2026-73216 coturn: mobility disconnects bypass allocation quotas and exhaust relay capacity
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...
EUVD-2026-56823
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnportsallocateeven in src/apps/relay/turnports.c marks the unused odd sibling port as TPSTAKENODD for an EVEN-PORT Allocate request with reservation bit R=0 even though no RTCP socket will release it, allowin...
CVE-2026-73215
CVE-2026-73215 affects Coturn (TURN/STUN server). Before 4.17.0, in turn_ports.c, turnports_allocate_even() marks an unused odd port as TPS_TAKEN_ODD for an EVEN-PORT Allocate with R=0, even though no RTCP socket will release it. An authenticated client can permanently exhaust the relay port pool...
CVE-2026-73215 The coturn server can end in a state where it does not accept more requests with "even-port" enabled.
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnportsallocateeven in src/apps/relay/turnports.c marks the unused odd sibling port as TPSTAKENODD for an EVEN-PORT Allocate request with reservation bit R=0 even though no RTCP socket will release it, allowin...
CVE-2026-73215 The coturn server can end in a state where it does not accept more requests with "even-port" enabled.
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnportsallocateeven in src/apps/relay/turnports.c marks the unused odd sibling port as TPSTAKENODD for an EVEN-PORT Allocate request with reservation bit R=0 even though no RTCP socket will release it, allowin...
PT-2026-70830
Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.17.0 Description The turnports allocate even function in src/apps/relay/turn ports.c incorrectly marks the unused odd sibling port as TPS TAKEN ODD during an EVEN-PORT Allocate request when the reservation bit R is s...
PT-2026-70831
Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.17.0 Description The shutdown client connection function in src/server/ns turn server.c prematurely calls dec quota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation...
EUVD-2006-6898
Malware in sbrugna...
EUVD-2016-8404
Malware in sbrugna...
EUVD-2005-2239
Malware in sbrugna...
Tater
Tater Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit. Credit All credit goes to @breenmachine, @foxglovesec, Google Project Zero, and anyone else that helped work out the details for this exploit. Potato - https://github.com/foxglovesec/Potato Included...
CVE-2005-2238
ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service port exhaustion and memory consumption by using all ephemeral ports...
TCP Ports get exhausted on the StoreFront server
StoreFront refuses to create connections and we get below events : Event ID 4231 : Request to allocate an ephemeral port number from the global TCP port space has failed due to all such ports being in use. Event ID 4227 : TCP/IP failed to establish an outgoing connection because the selected loca...
Update improves port exhaustion identification in Windows Server 2012 R2
Update improves port exhaustion identification in Windows Server 2012 R2 This article describes an update that enables port exhaustion identification without a memory dump in Windows Server 2012 R2. Before you install this update, see the Prerequisites section. About this update Network reporting...