What is CVE-2018-4058?

CVE-2018-4058 is a high-severity vulnerability in Coturn_project Coturn. CVSS score: 7.7/10. Published 2019-03-21.

How severe is CVE-2018-4058?

High severity. CVSS v3 base score is 7.7 out of 10.

Vulnerability in Coturn_project Coturn

CVE-2018-4058

An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server allows relaying external traffic to the loopback interface of its own host. This can…

EPSS: 0.009 (56.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N.

Affected products

Coturn_project Coturn
Talos Coturn — versions coTURN 4.5.0.5

References

talos-cna@cisco.com (Third Party Advisory, x_refsource_MISC, Mitigation)

Frequently asked questions

What is CVE-2018-4058?: CVE-2018-4058 is a high-severity vulnerability in Coturn_project Coturn. CVSS score: 7.7/10. Published 2019-03-21.
How severe is CVE-2018-4058?: High severity. CVSS v3 base score is 7.7 out of 10.