CVE catalog

CVE-2020-4067

coturn: CVE-2020-4067

[CVE catalog]

Severity
High · CVSS 7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
1.90% · Oct 25, 2026

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query coturn to get interesting bytes in the padding bytes from the connection of another client. This has been fixed in 4.5.1.3.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancoturnsid4.18.0-1fixed
Debiancoturnforky4.18.0-1fixed
Debiancoturntrixie4.6.1-2fixed
Debiancoturnbookworm4.6.1-1fixed
Ubuntucoturn16.044.4.5.4-2vulnerable
Ubuntucoturn16.044.5.0.2-3vulnerable
Ubuntucoturn16.044.5.0.3-1vulnerable
Ubuntucoturn16.044.5.0.3-1build1vulnerable
Ubuntucoturn16.044.5.0.3-1ubuntu0.2vulnerable
Ubuntucoturn16.044.5.0.3-1ubuntu0.3fixed
Ubuntucoturn18.044.5.0.6-1ubuntu2vulnerable
Ubuntucoturn18.044.5.0.7-1ubuntu1vulnerable
Ubuntucoturn18.044.5.0.7-1ubuntu2vulnerable
Ubuntucoturn18.044.5.0.7-1ubuntu2.18.04.1vulnerable
Ubuntucoturn18.044.5.0.7-1ubuntu2.18.04.2fixed
Ubuntucoturn20.044.5.1.1-1.1build1vulnerable
Ubuntucoturn20.044.5.1.1-1.1build2vulnerable
Ubuntucoturn20.044.5.1.1-1.1ubuntu0.20.04.1fixed
Ubuntucoturn16.044.4.5.4-2vulnerable
Ubuntucoturn16.044.5.0.2-3vulnerable
Ubuntucoturn16.044.5.0.3-1vulnerable
Ubuntucoturn16.044.5.0.3-1build1vulnerable
Ubuntucoturn16.044.5.0.3-1ubuntu0.2vulnerable
Ubuntucoturn16.044.5.0.3-1ubuntu0.3fixed
Ubuntucoturn18.044.5.0.6-1ubuntu2vulnerable
Ubuntucoturn18.044.5.0.7-1ubuntu1vulnerable
Ubuntucoturn18.044.5.0.7-1ubuntu2vulnerable
Ubuntucoturn18.044.5.0.7-1ubuntu2.18.04.1vulnerable
Ubuntucoturn18.044.5.0.7-1ubuntu2.18.04.2fixed
Ubuntucoturn20.044.5.1.1-1.1build1vulnerable
Ubuntucoturn20.044.5.1.1-1.1build2vulnerable
Ubuntucoturn20.044.5.1.1-1.1ubuntu0.20.04.1fixed
Opensusecoturnleap 15.24.5.1.3-lp152.2.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancoturnsourcesid4.5.1.3-1not yet assignedNot reportedNot reported
Debiancoturnsourceforky4.5.1.3-1not yet assignedNot reportedNot reported
Debiancoturnsourcetrixie4.5.1.3-1not yet assignedNot reportedNot reported
Debiancoturnsourcebookworm4.5.1.3-1not yet assignedNot reportedNot reported
Ubuntucoturndeb16.044.5.0.3-1ubuntu0.3Not reportedUSN-4415-1Not reported
Ubuntucoturndeb18.044.5.0.7-1ubuntu2.18.04.2Not reportedUSN-4415-1Not reported
Ubuntucoturndeb20.044.5.1.1-1.1ubuntu0.20.04.1Not reportedUSN-4415-1Not reported
Ubuntucoturndeb16.044.5.0.3-1ubuntu0.3Not reportedUBUNTU-CVE-2020-4067Not reported
Ubuntucoturndeb18.044.5.0.7-1ubuntu2.18.04.2Not reportedUBUNTU-CVE-2020-4067Not reported
Ubuntucoturndeb20.044.5.1.1-1.1ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-4067Not reported
Opensusecoturnrpmleap 15.24.5.1.3-lp152.2.3.1Not reportedOPENSUSE-SU-2020:0937-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [coturn]Fixed
    Details (2)

    • 4.6.1-1 · amd64 · bookworm

      Fixed · Fixed: 4.5.1.3-1

      dsa · coturn · debian · bookworm; dsa · coturn · debian · 12

    • 4.6.1-1 · arm64 · bookworm

      Fixed · Fixed: 4.5.1.3-1

      dsa · coturn · debian · bookworm; dsa · coturn · debian · 12

[Debian 13 (Trixie)]

  • [coturn]Fixed

    Source package: [coturn]

    Details (2)

    • 4.6.1-2 · amd64 · trixie

      Fixed · Fixed: 4.5.1.3-1

      dsa · coturn · debian · 13

    • 4.6.1-2+b2 · arm64 · trixie

      Fixed · Fixed: 4.5.1.3-1

      dsa · coturn · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]