CVE-2018-4058
published 2019-03-21CVE-2018-4058: An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server…
PriorityP342high7.7CVSS 3.1
AVNACLPRLUINSCCNIHAN
EPSS
0.94%
56.3th percentile
An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server allows relaying external traffic to the loopback interface of its own host. This can provide access to other private services running on that host, which can lead to further attacks. An attacker can set up a relay with a loopback address as the peer on an affected TURN server to trigger this vulnerability.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| coturn_project | coturn | < 4.5.0.9 | 4.5.0.9 |
| coturn_project | coturn | >= 0 < 4.5.1.0-1 | 4.5.1.0-1 |
| coturn_project | coturn | >= 0 < 4.5.1.0-1 | 4.5.1.0-1 |
| coturn_project | coturn | >= 0 < 4.5.1.0-1 | 4.5.1.0-1 |
| coturn_project | coturn | >= 0 < 4.5.1.0-1 | 4.5.1.0-1 |
| debian | coturn | < coturn 4.5.1.0-1 (bookworm) | coturn 4.5.1.0-1 (bookworm) |
| talos | coturn | — | — |
CVSS provenance
nvdv3.17.7HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
nvdv3.07.7HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
osv7.7HIGH
vendor_debian7.7HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j75v-963h-65p5: An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4
ghsa_unreviewed·2022-05-13
CVE-2018-4058 [HIGH] GHSA-j75v-963h-65p5: An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4
An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server allows relaying external traffic to the loopback interface of its own host. This can provide access to other private services running on that host, which can lead to further attacks. An attacker can set up a relay with a loopback address as the peer on an affected TURN server to trigger this vulnerability.
OSV
CVE-2018-4058: An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4
osv·2019-03-21·CVSS 7.7
CVE-2018-4058 [HIGH] CVE-2018-4058: An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4
An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server allows relaying external traffic to the loopback interface of its own host. This can provide access to other private services running on that host, which can lead to further attacks. An attacker can set up a relay with a loopback address as the peer on an affected TURN server to trigger this vulnerability.
Debian
CVE-2018-4058: coturn - An exploitable unsafe default configuration vulnerability exists in the TURN ser...
vendor_debian·2018·CVSS 7.7
CVE-2018-4058 [HIGH] CVE-2018-4058: coturn - An exploitable unsafe default configuration vulnerability exists in the TURN ser...
An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server allows relaying external traffic to the loopback interface of its own host. This can provide access to other private services running on that host, which can lead to further attacks. An attacker can set up a relay with a loopback address as the peer on an affected TURN server to trigger this vulnerability.
Scope: local
bookworm: resolved (fixed in 4.5.1.0-1)
bullseye: resolved (fixed in 4.5.1.0-1)
forky: resolved (fixed in 4.5.1.0-1)
sid: resolved (fixed in 4.5.1.0-1)
trixie: resolved (fixed in 4.5.1.0-1)
No detection rules found.
No public exploits indexed.
Talos
Vulnerability Spotlight: Multiple vulnerabilities in coTURN
blogs_talos·2019-01-29·CVSS 9.8
[CRITICAL] Vulnerability Spotlight: Multiple vulnerabilities in coTURN
Nicolas Edet of Cisco discovered these vulnerabilities.
### Executive summary
Today, Cisco Talos is disclosing three vulnerabilities in coTURN. coTURN is an open-source implementation of TURN and STUN servers that can be used as a general-purpose networking traffic TURN server. TURN servers are usually deployed in so-called “DMZ” zones — any server reachable from the internet — to provide firewall traversal solutions.
In accordance with our coordinated disclosure policy, Cisco Talos worked with coTURN to ensure that these issues are resolved and that an update is available for affected customers.
### Vulnerability details
coTURN administrator web portal SQL injection vulnerability (TALOS-2018-0730/CVE-2018-4056)
An exploitable SQL injection vulnerability exists in the administrator w
Talos
Vulnerability Spotlight: Multiple vulnerabilities in coTURN
blogs_talos·2019-01-29·CVSS 9.8
[CRITICAL] Vulnerability Spotlight: Multiple vulnerabilities in coTURN
## Vulnerability Spotlight: Multiple vulnerabilities in coTURN
Nicolas Edet of Cisco discovered these vulnerabilities.
## Executive summary
Today, Cisco Talos is disclosing three vulnerabilities in coTURN. coTURN is an open-source implementation of TURN and STUN servers that can be used as a general-purpose networking traffic TURN server. TURN servers are usually deployed in so-called “DMZ” zones — any server reachable from the internet — to provide firewall traversal solutions. In accordance with our coordinated disclosure policy, Cisco Talos worked with coTURN to ensure that these issues are resolved and that an update is available for affected customers.
## Vulnerability details
coTURN administrator web portal SQL injection vulnerability (TALOS-2018-0730/CVE-2018-4056) An exploitab
2019-03-21
Published