SIPSorcery's TurnServer component has a vulnerability where a malformed UDP datagram with a specific STUN header byte causes an unhandled exception that terminates the UDP receive loop. This results in a denial of service by disabling the TURN UDP relay for all clients until the process is restarted. The issue affects versions from 10.0.5 up to but not including 10.0.14. The vulnerability is pre-authentication and requires no privileges to exploit.