[SECURITY] [DLA 1671-1] coturn security update

Package : coturn Version : 4.2.1.2-1+deb8u1 CVE ID : CVE-2018-4056 CVE-2018-4058 CVE-2018-4059 Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. CVE-2018-4056 An SQL injection vulnerability was discovered in the coTURN administrator web portal. As the...

CVE-2018-4056

Affected software: coturn (TURN server) with vulnerable administrator web portal, prior to version 4.5.0.9. Issue: SQL injection via a specially crafted username in the login message can bypass authentication and grant access to the administrator web portal (remote via the external interface). Ev...

FreeBSD : turnserver -- multiple vulnerabilities (181beef6-2482-11e9-b4a3-00155d006b02)

Mihaly Meszaros reports : We made 4.5.1.0 release public today that fixes many vulnerabilities. It fix the following vulnerabilities : - CVE-2018-4056 - CVE-2018-4058 - CVE-2018-4059 They will be exposed very soon.. C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2018-4056

creationtimestamp| type| source ---|---|--- 2019-01-30 15:07:25+00:00| seen| MISP/5c51bd22-3c90-4883-b727-3fba0a021402...

Debian DSA-4373-1 : coturn - security update

Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. - CVE-2018-4056 A SQL injection vulnerability was discovered in the coTURN administrator web portal. As the administration web interface is shared with the production, it is unfortunately not possible to easily...

turnserver -- multiple vulnerabilities

Mihály Mészáros reports: We made 4.5.1.0 release public today that fixes many vulnerabilities. It fix the following vulnerabilities: CVE-2018-4056 CVE-2018-4058 CVE-2018-4059 They will be exposed very soon...