354 matches found
Design/Logic Flaw
Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN...
CVE-2020-11805
Technical details of CVE-2020-11805 are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.
CVE-2020-11805
Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN...
Cisco Meetings App Authorization Issues Vulnerability
Cisco Meetings App is a video conferencing application from Cisco USA. An authorization issue vulnerability exists in the API subsystem in Cisco Meetings App, which stems from a flaw in the protection mechanism for TURN server credentials. A remote attacker can exploit this vulnerability by...
The vulnerability of the STUN/TURN response buffer in the Coturn web server allows a attacker to access confidential data.
The vulnerability of the STUN/TURN response buffer in the Coturn web server is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
Information Disclosure
coturn is vulnerable to information disclosure. The STUN/TURN response buffer is not initialized properly and causes a leak of information between different client connections. An attacker is able to use their connection to intelligently query coturn to get interesting bytes in the padding bytes...
Remote code execution in turn extension for TYPO3
The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution...
GHSA-Q7J5-9J77-G4GQ Remote code execution in turn extension for TYPO3
The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution...
CVE-2020-3197
A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT TURN server credentials that are configured in an affected system. The vulnerability is due to insufficient protection mechanisms for the TU...
Cross site scripting
A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT TURN server credentials that are configured in an affected system. The vulnerability is due to insufficient protection mechanisms for the TU...
CVE-2020-3197 Cisco Meetings App Missing TURN Server Credentials Expiration Vulnerability
A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT TURN server credentials that are configured in an affected system. The vulnerability is due to insufficient protection mechanisms for the TU...
CVE-2020-3197
The CVE-2020-3197 entry concerns Cisco Meetings App: an API subsystem vulnerability that allows an unauthenticated, remote attacker to obtain and reuse TURN server credentials by intercepting legitimate traffic due to insufficient protection of those credentials. Impact described: attacker could ...
CVE-2020-3197 Cisco Meetings App Missing TURN Server Credentials Expiration Vulnerability
A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT TURN server credentials that are configured in an affected system. The vulnerability is due to insufficient protection mechanisms for the TU...
Cisco Meetings App Missing TURN Server Credentials Expiration Vulnerability
A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT TURN server credentials that are configured in an affected system. The vulnerability is due to insufficient protection mechanisms for the TU...
The vulnerability of the coTURN server function, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the coTURN server function is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Fedora: Security Advisory for coturn (FEDORA-2020-d946f64eea)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Updated coturn packages fix security vulnerability
The updated package fixes a security vulnerability: In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client an attacker could use their connection to...
[SECURITY] Fedora 32 Update: coturn-4.5.1.3-1.fc32
The Coturn TURN Server is a VoIP media traffic NAT traversal server and gat eway. It can be used as a general-purpose network traffic TURN server/gateway, to o. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relayin...
TYPO3 turn extension remote code execution vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. turn extension is one of the Flip book hand flipping book extension program. A security vulnerability exists in TYPO3 turn extension 0.3.2 and earlier versions. A remote attacker can exploi...