Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, good_peer_addr() in src/server/ns_turn_server.c uses ioa_addr_in_range() in src/client/ns_turn_ioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated RFC 6062 TCP CONNECT relay client to bypass an IPv4 denied-peer-ip range when the Coturn host has a useful translation route. This issue is fixed in version 4.13.1.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
Present
Additional conditions required
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
None
No disruption
CVSS Vector v4.0
Weakness Type (CWE)
References 6
https://github.com/coturn/coturn/commit/cf4b4952de48510d38415b96300da5fc674bfdda
security-advisories@github.com
https://github.com/coturn/coturn/commit/d49ee56aa9fe748af064853d5e430eec1ccc3cbc
security-advisories@github.com
https://github.com/coturn/coturn/pull/1945
security-advisories@github.com
https://github.com/coturn/coturn/pull/1947
security-advisories@github.com
https://github.com/coturn/coturn/releases/tag/4.13.1
security-advisories@github.com
https://github.com/coturn/coturn/security/advisories/GHSA-2x4g-wx24-48m4
security-advisories@github.com