PT-2025-53832 · Coturn · Coturn

Jornlp · Published 2025-12-30 · Updated 2026-03-15 · CVE-2025-69217

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions coturn versions 4.6.2r5 through 4.7.0-r4

Description coturn, a free open source implementation of TURN and STUN Server, contains a flaw related to its random number generator. Specifically, the random number generator for nonces and port randomization is weak after refactoring. Random numbers are generated using libc's random() function instead of OpenSSL's RAND bytes (except on Windows). By fetching approximately 50 sequential nonces through unauthenticated allocation requests, an attacker can reconstruct the state of the random number generator and predict future nonces. This allows for authentication while spoofing IP addresses. An attacker with knowledge of credentials can send authenticated messages without receiving responses, including nonces. Furthermore, the deterministic port randomization, based on the pseudorandom seed, allows attackers to predict allocated relay ports. If an attacker allocates a relay port, they can predict subsequent relay ports.

Recommendations Update to a version after commit 11fc465f4bba70bb0ad8aae17d6c4a63a29917d9.

Exploit

Fix

Weakness Enumeration

CWE-338

Related Identifiers

CVE-2025-69217

GHSA-FVJ6-9JHG-9J84

OPENSUSE-SU-2026:10375-1

Affected Products

Coturn

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69217.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-69217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-69217 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10375-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-69217 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-69217 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-69217 · Security Note
• https://github.com/coturn/coturn/security/advisories/GHSA-fvj6-9jhg-9j84 · Note
• https://github.com/coturn/coturn/commit/88ced471385869d7e7fbbc4766e78ef521b36af6 · Note
• https://github.com/coturn/coturn/commit/11fc465f4bba70bb0ad8aae17d6c4a63a29917d9 · Note
• https://twitter.com/cracbot/status/2007769020133753042 · Twitter Post
• https://suse.com/security/cve/CVE-2026-27624 · Note
• https://twitter.com/Cezar_H_Linux/status/2011030525939761374 · Twitter Post
• https://twitter.com/Cezar_H_Linux/status/2011010890112319842 · Twitter Post
• https://t.me/CVEtracker/40905 · Telegram Post