Skip to content
7.0 High

CVE-2020-6061 An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests

Description

An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. An attacker needs to send an HTTPS request to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
CoTURN Versions not published
The 2 CVEs of CoTURN →
Track this CVE