425 matches found
iperf3: memory allocation hazard and crash
An integer overflow flaw was found in the way iperf3 dynamically allocates memory buffers for JSON-formatted messages. A remote attacker could send a specially crafted sequence of bytes on the iperf3 control channel with a specified JSON message length of 0xffffffff to trigger an integer overflow...
iperf3 security update
3.1.7-3 - Resolves: 2224558 - iperf3: memory allocation hazard and crash CVE-2023-38403...
Oracle Linux 7 : iperf3 (ELSA-2023-4326)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4326 advisory. 3.1.7-3 - Resolves: 2224558 - iperf3: memory allocation hazard and crash CVE-2023-38403 Tenable has extracted the preceding description block directly from the...
Fedora: Security Advisory for iperf3 (FEDORA-2023-04243a1845)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for iperf3 (FEDORA-2023-5f3b4c0b97)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 38 : iperf3 (2023-04243a1845)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-04243a1845 advisory. Update to 3.14. Security fix for CVE-2023-38403 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Fedora 37 : iperf3 (2023-5f3b4c0b97)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5f3b4c0b97 advisory. Update to 3.14. Security fix for CVE-2023-38403 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Debian: Security Advisory (DLA-3506-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3506 : iperf3 - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3506 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3506-1 [email protected] https://www.debian.org/lts/security/...
Amazon Linux 2 : iperf3 (ALAS-2023-2153)
The version of iperf3 installed on the remote host is prior to 3.1.7-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2153 advisory. iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. CVE-2023-38403 Tenable...
Important: iperf3
Issue Overview: iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. CVE-2023-38403 Affected Packages: iperf3 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core...
DLA-3506-1 iperf3 - security update
Bulletin has no description...
CVE-2023-38403
An integer overflow flaw was found in the way iperf3 dynamically allocates memory buffers for JSON-formatted messages. A remote attacker could send a specially crafted sequence of bytes on the iperf3 control channel with a specified JSON message length of 0xffffffff to trigger an integer overflow...
Denial Of Service (DoS)
iperf3 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the library's integer overflow and heap corruption, which allows an attacker to crash the application by providing a maliciously crafted length field...
SUSE CVE-2023-38403
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...
Debian: Security Advisory (DSA-5455-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-38403
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...
ALPINE-CVE-2023-38403
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...