515 matches found
DEBIAN-CVE-2026-102253
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...
CVE-2026-102253
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...
CVE-2026-102253
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...
UBUNTU-CVE-2026-102253
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...
CVE-2026-102253
A flaw was found in iperf3. An unauthenticated remote attacker can exploit this issue by sending a crafted control-channel message followed by a specific User Datagram Protocol UDP datagram to the server. This causes the UDP receive processing thread to enter an unrecoverable infinite loop, leadi...
CVE-2026-102253 iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...
CVE-2026-102253
Versions of iperf3 prior to 3.22 are vulnerable to a denial of service (DoS) vulnerability. An unauthenticated remote attacker can trigger an unrecoverable infinite loop in the server's UDP receive worker by sending a single crafted control-channel parameter message followed by one 16-byte UDP da...
CVE-2026-102253 iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...
EUVD-2026-89415
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...
CVE-2026-102253
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...
CVE-2026-102253 iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...
PT-2026-102890
Name of the Vulnerable Software and Affected Versions iperf3 versions prior to 3.22 Description A denial of service issue allows unauthenticated remote attackers to cause the server's UDP receive worker to enter an unrecoverable infinite loop. This is achieved by sending a single crafted...
CVE-2026-102253: Loop with Unreachable Exit Condition
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: iperf3 (UTSA-2023-002138)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002138 advisory. iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. Tenable has extracted the preceding description block...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: iperf3 (UTSA-2026-106773)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106773 advisory. A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeric parameters, such as...
TencentOS Server 4: iperf3 (TSSA-2026:0958)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0958 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Oracle Linux 10 : ELSA-2026-61680-0: / iperf3 (ELSA-2026-616800)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-616800 advisory. - Fix JSON value bounds checks in getparameters and iperfparsearguments CVE-2026-71217 Tenable has extracted the preceding description block directly from th...
Oracle Linux 8 : ELSA-2026-61257-0: / iperf3 (ELSA-2026-612570)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-612570 advisory. 3.5-12.1 - Resolves: RHEL-236174 - Add JSON value checks for getparameters CVE-2026-71217 Tenable has extracted the preceding description block directly from...
Oracle Linux 9 : ELSA-2026-61389-0: / iperf3 (ELSA-2026-613890)
The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-613890 advisory. 3.9-17.1 - Resolves: RHEL-236176 - Add JSON value checks for getparameters CVE-2026-71217 Tenable has extracted the preceding description block directly from...
MiracleLinux 9 : iperf3-3.9-17.el9_8.1 (AXSA:2026-1734:06)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1734:06 advisory. iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion CVE-2026-71217 Tenable has...