CVE-2018-4058

 

Published at: - 21-03-2019 05:00

Last modified: - 07-06-2022 07:18

Total changes: - 3

Description

An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server allows relaying external traffic to the loopback interface of its own host. This can provide access to other private services running on that host, which can lead to further attacks. An attacker can set up a relay with a loopback address as the peer on an affected TURN server to trigger this vulnerability.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

 

Verification logic

 

Reference

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0732

 

Keywords

NVD

 

CVE-2018-4058

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures