Information disclosure in coTURN - CVE-2018-4058
Published: February 1, 2019
Vulnerability identifier: #VU17341
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-4058
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote authenticated attacker to gain access to potentially sensitive information.
The vulnerability exists in the coturn Traversal Using Relay NAT (TURN) server functionality due to an unsafe default configuration that allows the affected software to enable loopback forwarding to relay external traffic to the loopback interface. A remote attacker can set up a relay with a loopback address as the peer on a targeted TURN server that is designed to forward traffic from an external interface to the server loopback to gain unauthorized access to other sensitive services running on the loopback interface.
Affected software
coTURN
coturn (Debian package)
coturn (Debian package)
How to mitigate CVE-2018-4058
Update to version 4.5.1.0.
coTURN - update to 4.5.1.0
coturn (Debian package) - update to 4.5.0.5-1+deb9u1
coturn (Debian package) - update to 4.5.0.5-1+deb9u1