Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-1668

Критический

ALT-PU-2020-1668: package coturn update to version 4.5.1.1-alt2

Источник
errata.altlinux.org
Дата публикации
05.04.2020
Дата обновления
05.04.2020
Устраненные уязвимости
4

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades coturn to version 4.5.1.1-alt2.

Устраненные уязвимости4

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 6 лет назад

An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to server crash and denial of service. An attacker needs to send an HTTP request to trigger this vulnerability.

CVSS3: 7.5
nvd
больше 6 лет назад

An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to server crash and denial of service. An attacker needs to send an HTTP request to trigger this vulnerability.

CVSS3: 7.5
debian
больше 6 лет назад

An exploitable denial-of-service vulnerability exists in the way CoTUR ...

CVSS3: 9.8
ubuntu
больше 6 лет назад

An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. An attacker needs to send an HTTPS request to trigger this vulnerability.

CVSS3: 9.8
nvd
больше 6 лет назад

An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. An attacker needs to send an HTTPS request to trigger this vulnerability.