Test ID:	1.3.6.1.4.1.25623.1.0.704711
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-4711-1)
Summary:	The remote host is missing an update for the Debian 'coturn' package(s) announced via the DSA-4711-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'coturn' package(s) announced via the DSA-4711-1 advisory. Vulnerability Insight: Several vulnerabilities were discovered in coturn, a TURN and STUN server for VoIP. CVE-2020-4067 Felix Doerre reported that the STUN response buffer was not properly initialised, which could allow an attacker to leak bytes in the padding bytes from the connection of another client. CVE-2020-6061 Aleksandar Nikolic reported that a crafted HTTP POST request can lead to information leaks and other misbehavior. CVE-2020-6062 Aleksandar Nikolic reported that a crafted HTTP POST request can lead to server crash and denial of service. For the oldstable distribution (stretch), these problems have been fixed in version 4.5.0.5-1+deb9u2. For the stable distribution (buster), these problems have been fixed in version 4.5.1.1-1.1+deb10u1. We recommend that you upgrade your coturn packages. For the detailed security status of coturn please refer to its security tracker page at: [link moved to references] Affected Software/OS: 'coturn' package(s) on Debian 9, Debian 10. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-4067 https://github.com/coturn/coturn/security/advisories/GHSA-c8r8-8vp5-6gcm Debian Security Information: DSA-4711 (Google Search) https://www.debian.org/security/2020/dsa-4711 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNJJO77ZLGGFJWNUGP6VDG5HPAC5UDBK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5G35UBNSRLL6SYRTODYTMBJ65TLQILUM/ https://github.com/coturn/coturn/blob/aab60340b201d55c007bcdc853230f47aa2dfdf1/ChangeLog#L15 https://github.com/coturn/coturn/issues/583 https://lists.debian.org/debian-lts-announce/2020/07/msg00002.html SuSE Security Announcement: openSUSE-SU-2020:0937 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00010.html https://usn.ubuntu.com/4415-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-6061 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XN2NK6FT7AMW5UIZNXDNHKEAYWAUMGSF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OUVZRXW5ZIGWVKOLF3NPXRPP74YX7BUY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQZZPI34LAS3SFNW6Z2ZJ46RKVGEODNA/ https://talosintelligence.com/vulnerability_reports/TALOS-2020-0984 Common Vulnerability Exposure (CVE) ID: CVE-2020-6062 https://talosintelligence.com/vulnerability_reports/TALOS-2020-0985
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.