CVE-2025-69217
Description
A flaw was found in coturn. A remote attacker can exploit a predictable random number generator used for nonces and port randomization. By sending a series of unauthenticated requests, an attacker can reconstruct the random number generator's state, allowing them to predict future nonces and port assignments. This vulnerability enables authentication bypass with spoofed IP addresses and the ability to predict relay ports, potentially leading to unauthorized access or denial of service.
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Mitigation
To mitigate this issue, restrict network access to the coturn service to only trusted clients and networks. This can be achieved by configuring firewall rules to limit inbound connections to the coturn service ports. If the coturn service is not required, consider disabling it to eliminate the attack surface. If the service is reloaded or restarted, ensure firewall rules remain in effect.
Understanding the Weakness (CWE)
Access Control
Technical Impact: Bypass Protection Mechanism
If a PRNG is used for authentication and authorization, such as a session ID or a seed for generating a cryptographic key, then an attacker may be able to easily guess the ID or cryptographic key and gain access to restricted functionality.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
