Improper Initialization in coTURN - CVE-2020-4067

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU30159

Improper Initialization in coTURN - CVE-2020-4067

Published: June 29, 2020 / Updated: July 17, 2020


Vulnerability identifier: #VU30159
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-4067
CWE-ID: CWE-665
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query coturn to get interesting bytes in the padding bytes from the connection of another client. This has been fixed in 4.5.1.3.


Affected software

coTURN
Debian Linux
Fedora
Opensuse
Ubuntu
coturn (Alpine package)
coturn (Ubuntu package)
coturn (Debian package)
coturn

How to mitigate CVE-2020-4067

Install update from vendor's website.

coTURN - update to 4.5.1.3
coturn (Alpine package) - update to 4.5.1.3-r0
coturn (Ubuntu package) - addressed in versions 4.5.0.3-1ubuntu0.3, 4.5.0.7-1ubuntu2.18.04.2, 4.5.1.1-1.1ubuntu0.19.10.1, 4.5.1.1-1.1ubuntu0.20.04.1
coturn (Debian package) - addressed in versions 4.5.0.5-1+deb9u2, 4.5.1.1-1.1+deb10u1
coturn - addressed in versions 4.5.1.3-1.el7, 4.5.1.3-1.el8, 4.5.1.3-1.fc31, 4.5.1.3-1.fc32

External References

Related Security Bulletins