Vulnerabilities > Coturn Project > Coturn > 4.5.1.1

DATE CVE VULNERABILITY TITLE RISK
2021-01-13 CVE-2020-26262 Confused Deputy vulnerability in multiple products
Coturn is free open source implementation of TURN and STUN Server.
network
low complexity
coturn-project fedoraproject CWE-441
7.2
2020-06-29 CVE-2020-4067 Improper Initialization vulnerability in multiple products
In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly.
7.5
2020-02-19 CVE-2020-6062 NULL Pointer Dereference vulnerability in multiple products
An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.
7.5
2020-02-19 CVE-2020-6061 Out-of-bounds Read vulnerability in multiple products
An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.
network
low complexity
coturn-project fedoraproject debian canonical CWE-125
critical
9.8