https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:34:52.358191+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-03981 bdu:2020-03981 2026-10-02T20:34:52.474301+00:00 bdu:2020-03981 https://cve.radiocsirt.org/vuln/cleanstart-2023-mz92027 CLEANSTART-2023-MZ92027 — In coturn before version 4 2026-10-02T20:34:52.474339+00:00

Affected: CleanStart: coturn

Security vulnerability affects the coturn package. In coturn before version 4.

 https://cve.radiocsirt.org/vuln/cnvd-2021-25273 cnvd-2021-25273 2026-10-02T20:34:52.474372+00:00 cnvd-2021-25273 https://cve.radiocsirt.org/vuln/euvd-2026-36362 EUVD-2026-36362 2026-10-02T20:34:52.474386+00:00 EUVD-2026-36362 https://cve.radiocsirt.org/vuln/fkie_cve-2020-4067 fkie_cve-2020-4067 2026-10-02T20:34:52.474398+00:00

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query coturn to get interesting bytes in the padding bytes from the connection of another client. This has been fixed in 4.5.1.3.

 https://cve.radiocsirt.org/vuln/gsd-2020-4067 gsd-2020-4067 2026-10-02T20:34:52.474420+00:00 gsd-2020-4067 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0937-1 openSUSE-SU-2020:0937-1 — Security update for coturn 2026-10-02T20:34:52.474431+00:00

Security update for coturn

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-4067 UBUNTU-CVE-2020-4067 2026-10-02T20:34:52.474448+00:00

Affected: Ubuntu:16.04:LTS: coturn, Ubuntu:18.04:LTS: coturn, Ubuntu:20.04:LTS: coturn

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query coturn to get interesting bytes in the padding bytes from the connection of another client. This has been fixed in 4.5.1.3.