coturn crash/segmentation fault on dtls
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
coturn (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
In stable bionic release (same on xenial), the coturn server can crah on some DTLS connections.
The problem has been fixed on the server (version 4.5.0.8 see : https:/
To reproduce :
Start coturn on /etc/turnserver
cert=/etc/...
pkey=/etc/...
and NOT "no-dtls", so the UDP TLS service is started.
Now you can crash it with nmap :
sudo nmap -sU -sV -p 5349 <myip-notloopback>
Now the server in the log (/var/log/
turnserver[1222]: segfault at 7f687d230bc0 ip 00007f687b3f8f8c sp 00007f68753438e8 error 7 in libc-2.
=> The problem is that turnserver is running with root, so potentially be a security problem ?
I tested the last master version (4.5.1.2) on github.
Last problem of CVE HTTP vulnerabilty seems to be corrected too (?)
Sometimes you will need to send 2 nmap requests to crash coturn on the 2nd time.