Skip to content
OpenAdvisories

Package · Ubuntu

coturn

27 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.3

    Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests

    Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unke…