An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to server crash and denial of service. An attacker needs to send an HTTP request to trigger this vulnerability.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4415-1 advisory.

    Felix Drre discovered that coTURN response buffer is not initialized properly. An attacker could     possibly use this issue to obtain sensitive information. (CVE-2020-4067)

    It was discovered that coTURN web server incorrectly handled HTTP POST requests. An attacker could     possibly use this issue to cause a denial of service, obtain sensitive information or other unspecified     impact. (CVE-2020-6061, CVE-2020-6062)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities were discovered in coturn, a TURN and STUN server for VoIP.

  - CVE-2020-4067     Felix Doerre reported that the STUN response buffer was     not properly initialised, which could allow an attacker     to leak bytes in the padding bytes from the connection     of another client.

  - CVE-2020-6061     Aleksandar Nikolic reported that a crafted HTTP POST     request can lead to information leaks and other     misbehavior.

  - CVE-2020-6062     Aleksandar Nikolic reported that a crafted HTTP POST     request can lead to server crash and denial of service.

- An exploitable heap overflow vulnerability exists in the     way CoTURN 4.5.1.1 web server parses POST requests. A     specially crafted HTTP POST request can lead to     information leaks and other misbehavior.

  - An exploitable denial-of-service vulnerability exists in     the way CoTURN 4.5.1.1 web server parses POST requests.
    A specially crafted HTTP POST request can lead to server     crash and denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
138165	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : coTURN vulnerabilities (USN-4415-1)	Nessus	Ubuntu Local Security Checks	critical
137888	Debian DSA-4711-1 : coturn - security update	Nessus	Debian Local Security Checks	critical
135108	Fedora 30 : coturn (2020-f3fcb1608a)	Nessus	Fedora Local Security Checks	critical
135105	Fedora 31 : coturn (2020-305c173af8)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2020-6062

high

Tenable Plugins

critical

critical

critical

critical