Skip to content
OpenAdvisories
High DSA-4711-1 3 CVEs

coturn - security update

Published Jun 29, 2020 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 10 coturn 4.5.1.1-1.1+deb10u1
Debian · 9 coturn 4.5.0.5-1+deb9u2

Vulnerabilities 3

  • High 7.0

    Improper Initialization in coturn

    In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query …

  • High 7.0

    An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. …

  • Medium 5.9

    An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A spec…