Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:26144
HistoryAug 06, 2020 - 9:33 p.m.

Information Disclosure

2020-08-0621:33:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
coturn
software vulnerability
stun/turn
information disclosure
buffer leak
attacker
client connections

EPSS

0.006

Percentile

79.3%

JSON

coturn is vulnerable to information disclosure. The STUN/TURN response buffer is not initialized properly and causes a leak of information between different client connections. An attacker is able to use their connection to intelligently query coturn to get interesting bytes in the padding bytes from the connection of another client.

Related

osv 4
openvas 8
fedora 2
nessus 7
ubuntucve 1
nvd 1
freebsd 1
mageia 1
suse 1
prion 1
alpinelinux 1
debiancve 1
debian 3
cvelist 1
cve 1
ubuntu 1
osv
osv
CVE-2020-4067
2020-06-29 20:15:10
coturn - security update
2020-07-01 00:00:00
coturn - security update
2020-06-29 00:00:00
openvas
openvas
openSUSE: Security Advisory for coturn (openSUSE-SU-2020:0937-1)
2020-07-08 00:00:00
Mageia: Security Advisory (MGASA-2020-0287)
2022-01-28 00:00:00
Fedora: Security Advisory for coturn (FEDORA-2020-d946f64eea)
2020-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: coturn-4.5.1.3-1.fc32
2020-07-09 01:06:23
[SECURITY] Fedora 31 Update: coturn-4.5.1.3-1.fc31
2020-07-09 01:07:22
nessus
nessus
Debian DLA-2271-1 : coturn security update
2020-07-02 00:00:00
Fedora 32 : coturn (2020-d946f64eea)
2020-07-09 00:00:00
Fedora 31 : coturn (2020-9eadf517de)
2020-07-09 00:00:00
ubuntucve
ubuntucve
CVE-2020-4067
2020-06-29 00:00:00
nvd
nvd
CVE-2020-4067
2020-06-29 20:15:10
freebsd
freebsd
coturn -- information leakage
2020-06-30 00:00:00
mageia
mageia
Updated coturn packages fix security vulnerability
2020-07-10 11:01:08
suse
suse
Security update for coturn (moderate)
2020-07-07 00:00:00
prion
prion
Design/Logic Flaw
2020-06-29 20:15:00
alpinelinux
alpinelinux
CVE-2020-4067
2020-06-29 20:15:10
debiancve
debiancve
CVE-2020-4067
2020-06-29 20:15:10
debian
debian
[SECURITY] [DLA 2271-1] coturn security update
2020-07-01 12:32:12
[SECURITY] [DSA 4711-1] coturn security update
2020-06-29 16:15:28
[SECURITY] [DSA 4711-1] coturn security update
2020-06-29 16:15:28
cvelist
cvelist
CVE-2020-4067 Improper Initialization in coturn
2020-06-29 19:55:13
cve
cve
CVE-2020-4067
2020-06-29 20:15:10
ubuntu
ubuntu
coTURN vulnerabilities
2020-07-06 00:00:00

EPSS

0.006

Percentile

79.3%

JSON
Related for VERACODE:26144
osv4openvas8fedora2nessus7ubuntucve1nvd1freebsd1mageia1suse1prion1alpinelinux1debiancve1debian3cvelist1cve1ubuntu1