CVE-2026-73215
2026-08-11
18h18 +00:00
18h18 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnports_allocate_even() in src/apps/relay/turn_ports.c marks the unused odd sibling port as TPS_TAKEN_ODD for an EVEN-PORT Allocate request with reservation bit R=0 even though no RTCP socket will release it, allowing an authenticated client to permanently exhaust the relay port pool and cause subsequent allocations to fail with STUN error 508. This issue is fixed in version 4.17.0.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Uncontrolled Resource Consumption The product does not properly control the allocation and maintenance of a limited resource. |
||
| Missing Release of Resource after Effective Lifetime The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed. |
