Skip to content
OpenAdvisories
High DSA-4829-1 1 CVE

coturn - security update

Published Jan 11, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 coturn 4.5.1.1-1.1+deb10u2

Vulnerabilities 1

  • High 7.2

    Loopback bypass in Coturn

    Coturn is free open source implementation of TURN and STUN Server. Coturn before version 4.5.2 by default does not allow peers to connect and relay packets to loopback addresses in the range of `127.x.x.x`. However, it was observed that when sending a `CONNEC…