Linux Distros Unpatched Vulnerability : CVE-2026-71218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message leng...

CVE-2026-71218: Memory Allocation with Excessive Size Value

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...

CVE-2026-71217: Improper Input Validation

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...

PT-2026-70097

Name of the Vulnerable Software and Affected Versions iperf3 affected versions not specified Description A flaw in the server's handling of control-channel JSON allows a remote attacker to cause a Denial of Service DoS. By sending crafted JSON containing oversized numeric parameters, specifically...

PT-2026-70098

Name of the Vulnerable Software and Affected Versions iperf3 affected versions not specified Description A remote unauthenticated attacker can exploit a flaw in the JSON read function. The function accepts a message length controlled by the peer and allocates memory without an upper bound, which...

JLSEC-2026-759

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: iperf3 (UTSA-2026-005934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005934 advisory. In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow. Tenable has extracted the preceding description block directly...

RHSA-2026:2449 Red Hat Security Advisory: iperf3 security update

Bulletin has no description...

RHSA-2026:2448 Red Hat Security Advisory: iperf3 security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

iperf3: iperf Heap Buffer Overflow

A flaw was found in iperf3. An off-by-one error in the iperfauth.c file leads to a heap-based buffer overflow, potentially allowing a network attacker to trigger an application-level denial of service. This overflow occurs during the processing of authentication data. The vulnerability can only b...

Moderate: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability...

RHSA-2026:2328 Red Hat Security Advisory: iperf3 security update

Bulletin has no description...

RHSA-2026:2329 Red Hat Security Advisory: iperf3 security update

Bulletin has no description...

RHEL 8 : iperf3 (RHSA-2026:2448)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:2448 advisory. Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, a...

Moderate: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring Syste...

Moderate: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

iperf3: iperf Heap Buffer Overflow

A flaw was found in iperf3. An off-by-one error in the iperfauth.c file leads to a heap-based buffer overflow, potentially allowing a network attacker to trigger an application-level denial of service. This overflow occurs during the processing of authentication data. The vulnerability can only b...

iperf3 security update

An update is available for iperf3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Iperf is a tool which can measure maximum TCP bandwidth and tune various...

RockyLinux 9 : iperf3 (RLSA-2026:1595)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:1595 advisory. iperf3: iperf Heap Buffer Overflow CVE-2025-54349 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note that...