CVE-2023-39240

CVE-2023-39240 affects ASUS RT-AX56U V2: a format string vulnerability in the iperf client API, caused by insufficient validation in set_iperf3_cli.cgi. A remote attacker with administrator privileges could achieve remote code execution or service disruption. Exploitation details are not provided...

The vulnerability of the iperf function in the set_iperf3_svr.cgi application programming interface of ASUS RT-AX55, RT-AX56U, and RT-AC86U routers allows a hacker to execute arbitrary code.

The vulnerability of the iperf function in the application programming interface for ASUS RT-AX55, RT-AX56UV2, and RT-AC86U routers is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ASUS RT-AX56U Formatting String Error Vulnerability

The ASUS RT-AX56U is a wireless router from Asus China. The ASUS RT-AX56U suffers from a Format String Error vulnerability that stems from a format string vulnerability found in the iperf client function API...

Important Photon OS Security Update - PHSA-2023-3.0-0637

Updates of 'gdb', 'haproxy', 'iperf', 'nxtgn-openssl' packages of Photon OS have been released...

Important: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

iperf3: memory allocation hazard and crash

An integer overflow flaw was found in the way iperf3 dynamically allocates memory buffers for JSON-formatted messages. A remote attacker could send a specially crafted sequence of bytes on the iperf3 control channel with a specified JSON message length of 0xffffffff to trigger an integer overflow...

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

...

Important: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

[SECURITY] Fedora 38 Update: iperf3-3.14-1.fc38

Iperf is a tool to measure maximum TCP bandwidth, allowing the tuning of various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, data-gram loss...

[SECURITY] Fedora 37 Update: iperf3-3.14-1.fc37

Iperf is a tool to measure maximum TCP bandwidth, allowing the tuning of various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, data-gram loss...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : iperf (SUSE-SU-2023:2987-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2987-1 advisory. - CVE-2023-38403: Fixed integer overflow leading to heap buffer overflow bsc1213430. Tenable has extracte...

SUSE-SU-2023:2987-1 Security update for iperf

This update for iperf fixes the following issues: - CVE-2023-38403: Fixed integer overflow leading to heap buffer overflow bsc1213430...

The vulnerability of the IPerf3 network bandwidth measurement tool, related to integer overflows, allows a hacker to cause a service failure.

The vulnerability of the IPerf3 network bandwidth measurement tool is related to integer overflows during the processing of field lengths. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

iperf3 输入验证错误漏洞

iperf3 is an ESnet open source tool for actively measuring the maximum bandwidth achievable on an IP network. A security vulnerability exists in iperf3 versions prior to 3.14. An attacker exploited the vulnerability to cause an integer overflow and heap corruption via a specially crafted length...

PT-2023-3096 · D Link · D-Link Dir-842

Name of the Vulnerable Software and Affected Versions: D-Link DIR-842V2 version 1.0.3 Description: The issue is related to a command injection vulnerability in the iperf3 diagnostics function. This vulnerability is associated with a lack of data sanitization at the management level, which could...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: memory corruption in AX88179178A based USB ethernet device. CVE-2022-2964 kernel: i915: Incorrect GPU TLB flush can lead to random memory access CVE-2022-4139 For more details about the...

Abode Iota 操作系统命令注入漏洞

Abode Iota is a reliable Diy home security system from Abode. An operating system command injection vulnerability exists in Abode Iota versions 6.9X and 6.9Z, which stems from an operating system command injection in the web interface /action/iperf function that can be exploited by an attacker to...

PT-2025-31761

Name of the Vulnerable Software and Affected Versions iperf versions prior to 3.19.1 Description The software contains a flaw in iperf auth.c where a malformed authentication attempt causes a Base64Decode assertion failure, leading to application termination. Recommendations Update to version...

Mageia: Security Advisory (MGASA-2016-0235)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SD-WAN Diagnostics Tool traffic (ping, traceroute and iperf) is being dropped by firewall policy

SD-WAN Diagnostics Tool traffic ping, traceroute and iperf is being dropped by a firewall policy manually configured to drop traffic that has not been explicitly allowed...