[SECURITY] Fedora 45 Update: iperf3-3.22-1.fc45

Iperf is a tool to measure maximum TCP bandwidth, allowing the tuning of various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, data-gram loss...

CVE-2023-33782

CVE-2023-33782 Description D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability in the iperf3 diagnostics functionality. Proof of concept...

CVE-2026-71217-PoC

Introduction An extremely vibe-coded demonstration of CVE-2026-71217 - Tested against iperf3 3.16 Demo reelix@reelix-cachy  /CVE-2026-71217  docker container ls -la CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 50d4673a0b27 iperf3:3.16-vuln "iperf3 -s" 41 minutes ago Exited 139 3 minute...

Fedora 45 : iperf3 (2026-72fe3625a6)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-72fe3625a6 advisory. Update 3.22. Fixes rhbz2543656 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

MGASA-2026-0539 Updated iperf package fixes security vulnerabilities

Iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion. CVE-2026-71217 Unbounded peer-controlled allocation in iperf3 jsonread allows unauthenticated remote memory exhaustion. CVE-2026-71218 Iperf3 3.21 esnet/iperf contains a...

Updated iperf package fixes security vulnerabilities

Iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion. CVE-2026-71217 Unbounded peer-controlled allocation in iperf3 jsonread allows unauthenticated remote memory exhaustion. CVE-2026-71218 Iperf3 3.21 esnet/iperf contains a...

Amazon Linux 2023 : iperf3, iperf3-devel (ALAS2023-2026-3299)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3299 advisory. iperf3 3.20-3.21 esnet/iperf has a pre-auth heap buffer overflow in decryptrsamessage: a 256-byte RSA buffer is BIOread with the attacker-controlled ciphertext length guard warns only, so an...

Medium: iperf3

Issue Overview: iperf3 3.20-3.21 esnet/iperf has a pre-auth heap buffer overflow in decryptrsamessage: a 256-byte RSA buffer is BIOread with the attacker-controlled ciphertext length guard warns only, so an unauthenticated client overflows the heap via an oversized authtoken; CVE-2026-101283...

Rocky Linux 10.2 [CIQ] Security Update: iperf3 / iperf3-debuginfo / iperf3-debugsource (crlsa-2026_88207)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202688207 advisory. iperf3: iperf3: Denial of Service via UDP receive worker infinite loop CVE-2026-102253 Tenable has extracted the preceding description block directly from the C...

RLSA-2026:88207 Important: iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fixes: iperf3: iperf3: Denial of Service via UDP receive worker infinite loop CVE-2026-102253 For more details about the...

iperf3 security update

An update is available for iperf3. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Iperf is a tool which can measure maximum TCP bandwidth and tune various...

RockyLinux 10 : iperf3 (RLSA-2026:88207)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:88207 advisory. iperf3: iperf3: Denial of Service via UDP receive worker infinite loop CVE-2026-102253 Tenable has extracted the preceding description block directly from the...

Important: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

iperf3: iperf3: Denial of Service via UDP receive worker infinite loop

A flaw was found in iperf3. An unauthenticated remote attacker can exploit this issue by sending a crafted control-channel message followed by a specific User Datagram Protocol UDP datagram to the server. This causes the UDP receive processing thread to enter an unrecoverable infinite loop, leadi...

ALSA-2026:88207 Important: iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fixes: iperf3: iperf3: Denial of Service via UDP receive worker infinite loop CVE-2026-102253 For more details about the...

Oracle Linux 10 : iperf3 (ELSA-2026-88207)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-88207 advisory. - DoS via UDP receive worker infinite loop CVE-2026-102253 Tenable has extracted the preceding description block directly from the Oracle Linux security...

iperf3 security update

3.17.1-6.2 - DoS via UDP receive worker infinite loop CVE-2026-102253 - Resolves: RHEL-273152...

RHEL 10 : iperf3 (RHSA-2026:88207)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:88207 advisory. Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter,...

Fedora 43 : iperf3 (2026-af72c5c990)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-af72c5c990 advisory. Update to 3.22. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : iperf3 (2026-c6bdc4b415)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c6bdc4b415 advisory. Update to 3.22. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...