Debian/coturn: critical 9.8
An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal
Action: Upgrade coturn to 4.5.1.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.5.1.0-1 | - |
Fixed versions
| 4.5.1.0-1 |
Sources
- osv: DEBIAN-CVE-2018-4059#Debian:14/coturn
- https://security-tracker.debian.org/tracker/CVE-2018-4059
published · modified · JSON