CVE-2026-71217-PoC

Introduction An extremely vibe-coded demonstration of CVE-2026-71217 - Tested against iperf3 3.16 Demo reelix@reelix-cachy  /CVE-2026-71217  docker container ls -la CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 50d4673a0b27 iperf3:3.16-vuln "iperf3 -s" 41 minutes ago Exited 139 3 minute...

Security update for iperf (important)

openSUSE security update: security update for iperf ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22090-1 Rating: important References: bsc1283528 bsc1283786 bsc1283787 bsc1284404 bsc1284405 Cross-References: CVE-2026-101276 CVE-2026-101283...

CVE-2023-33782

CVE-2023-33782 Description D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability in the iperf3 diagnostics functionality. Proof of concept...

SUSE SLES15 Security Update : iperf (SUSE-SU-2026:4678-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4678-1 advisory. - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion...

Security update for iperf

This update for iperf fixes the following issues: CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion bsc1284405. CVE-2026-71218: unbounded peer-controlled allocation in JSONread allows unauthenticated remote...

SUSE-SU-2026:4678-1 Security update for iperf

This update for iperf fixes the following issues: - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion bsc1284405. - CVE-2026-71218: unbounded peer-controlled allocation in JSONread allows unauthenticated remot...

Exploit for CVE-2026-102253

CVE-2026-102253-POC DOS infinite-loop Vulnerability POC Su...

SUSE CVE-2026-71218

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...

CVE-2026-102253 affecting package iperf3 for versions less than 3.17.1-7

CVE-2026-102253 affecting package iperf3 for versions less than 3.17.1-7. A patched version of the package is available...

SUSE CVE-2026-101276

iperf3 3.21 esnet/iperf contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog servertimerproc frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperfstream; fixed in 3.22...

SUSE CVE-2026-101283

iperf3 3.20-3.21 esnet/iperf has a pre-auth heap buffer overflow in decryptrsamessage: a 256-byte RSA buffer is BIOread with the attacker-controlled ciphertext length guard warns only, so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22...

SUSE CVE-2026-102253

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...

EUVD-2026-90389

iperf3 3.20–3.21 esnet/iperf has a pre-auth heap buffer overflow in decryptrsamessage: a 256-byte RSA buffer is BIOread with the attacker-controlled ciphertext length guard warns only, so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22...

Rocky Linux 9 [CIQ] Security Update: iperf3 / iperf3-debuginfo / iperf3-debugsource Multiple Vulnerabilities (crlsa-2024_9185)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249185 advisory. iperf3: possible denial of service CVE-2023-7250,ESNET-SECADV-2023-0002 iperf3: vulnerable to marvin attack if the authentication option is used...

Rocky Linux 9.6 [CIQ] Security Update: iperf3 Multiple Vulnerabilities (ciqsa-2026_1396)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261396 advisory. This advisory aggregates security fixes for the iperf3 SRPM in CIQ LTS 9.6. It addresses 2 CVEs: CVE-2023-38403, CVE-2025-54350. Tenable has extracted th...

Rocky Linux 9 [CIQ] Security Update: iperf3 / iperf3-debuginfo / iperf3-debugsource (crlsa-2026_61389)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202661389 advisory. iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion CVE-2026-71217 Tenable has...

AlmaLinux 9.2 [TuxCare] Security Update: iperf3 / iperf3-devel (ALMALINUX9.2:CLSA-2026:1788532080)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788532080 advisory. - A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeri...

Rocky Linux 8.6 [CIQ] Security Update: iperf3 / iperf3-debuginfo / iperf3-debugsource / iperf3-devel Multiple Vulnerabilities (ciqsa-2026_0061)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260061 advisory. This advisory aggregates security fixes for the iperf3 SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-38403, CVE-2023-7250, CVE-2024-26306,...

Rocky Linux 9 [CIQ] Security Update: iperf3 / iperf3-debuginfo / iperf3-debugsource (crlsa-2023_4571)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234571 advisory. iperf3: memory allocation hazard and crash CVE-2023-38403 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8 [CIQ] Security Update: iperf3 / iperf3-debuginfo / iperf3-debugsource (crlsa-2023_4570)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234570 advisory. iperf3: memory allocation hazard and crash CVE-2023-38403 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...