NetSight
high7.5

CVE-2020-6062

An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests.

Impact

An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to server crash and denial of service. An attacker needs to send an HTTP request to trigger this vulnerability.

Affected products

VendorProductAffected versions
Coturn ProjectCoturn
Version 4.5.1.1
DebianDebian Linux
Versions 9.0, 10.0
FedoraprojectFedora
Versions 30, 31, 32
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.10, 20.04

Weakness classification

References