Skip to content
OpenAdvisories
High DLA-2522-1 1 CVE

coturn - security update

Published Jan 12, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 coturn 4.5.0.5-1+deb9u3

Vulnerabilities 1

  • High 7.2

    Loopback bypass in Coturn

    Coturn is free open source implementation of TURN and STUN Server. Coturn before version 4.5.2 by default does not allow peers to connect and relay packets to loopback addresses in the range of `127.x.x.x`. However, it was observed that when sending a `CONNEC…