Reporting a security issue: CVE-2020-4067

[felixdoerre]

Hi, I would like to report a (potentially exploitable) security issue in coturn, but I am not sure what the expected process is and if you desire to discuss this issue confidentially until it is resolved.

Regarding the criticality/impact: I am not completely sure, what the impact is, but I can imagine that this can be practically exploited depending on the exact scenario where coturn is used in. In summary, I'd really like to have this issue resolved.

Could you please give me guidance on how to proceed?

[misi]

Please send it to me: misi@majd.eu

[felixdoerre]

The security issue was resolved and the corresponding security advisory was published. I believe this issue is resolved now.

[misi]

Thanks @felixdoerre for the report, and for your help, and cooperation!