https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:41:07.863362+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-4067 CVE-2020-4067 — Improper Initialization in coturn 2026-10-07T08:41:07.904721+00:00

Affected: coturn

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query coturn to get interesting bytes in the padding bytes from the connection of another client. This has been fixed in 4.5.1.3.

 https://cve.radiocsirt.org/vuln/usn-4415-1 USN-4415-1 — coturn vulnerabilities 2026-10-07T08:41:07.904803+00:00

Affected: Ubuntu:16.04:LTS: coturn, Ubuntu:18.04:LTS: coturn, Ubuntu:20.04:LTS: coturn

Felix Dörre discovered that coTURN response buffer is not initialized properly. An attacker could possibly use this issue to obtain sensitive information. (CVE-2020-4067)

It was discovered that coTURN web server incorrectly handled HTTP POST requests. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information or other unspecified impact. (CVE-2020-6061, CVE-2020-6062)