Important: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 8 : iperf3 (RHSA-2023:4416)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4416 advisory. Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, a...

RHEL 8 : iperf3 (RHSA-2023:4414)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4414 advisory. Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, a...

RHEL 8 : iperf3 (RHSA-2023:4415)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4415 advisory. Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, a...

iperf3: memory allocation hazard and crash

An integer overflow flaw was found in the way iperf3 dynamically allocates memory buffers for JSON-formatted messages. A remote attacker could send a specially crafted sequence of bytes on the iperf3 control channel with a specified JSON message length of 0xffffffff to trigger an integer overflow...

iperf3 security update

3.1.7-3 - Resolves: 2224558 - iperf3: memory allocation hazard and crash CVE-2023-38403...

Oracle Linux 7 : iperf3 (ELSA-2023-4326)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4326 advisory. 3.1.7-3 - Resolves: 2224558 - iperf3: memory allocation hazard and crash CVE-2023-38403 Tenable has extracted the preceding description block directly from the...

Fedora: Security Advisory for iperf3 (FEDORA-2023-5f3b4c0b97)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for iperf3 (FEDORA-2023-04243a1845)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : iperf3 (2023-04243a1845)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-04243a1845 advisory. Update to 3.14. Security fix for CVE-2023-38403 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 37 : iperf3 (2023-5f3b4c0b97)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5f3b4c0b97 advisory. Update to 3.14. Security fix for CVE-2023-38403 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Debian: Security Advisory (DLA-3506-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3506 : iperf3 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3506 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3506-1 [email protected] https://www.debian.org/lts/security/...

Amazon Linux 2 : iperf3 (ALAS-2023-2153)

The version of iperf3 installed on the remote host is prior to 3.1.7-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2153 advisory. iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. CVE-2023-38403 Tenable...

Important: iperf3

Issue Overview: iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. CVE-2023-38403 Affected Packages: iperf3 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core...

DLA-3506-1 iperf3 - security update

Bulletin has no description...

CVE-2023-38403

An integer overflow flaw was found in the way iperf3 dynamically allocates memory buffers for JSON-formatted messages. A remote attacker could send a specially crafted sequence of bytes on the iperf3 control channel with a specified JSON message length of 0xffffffff to trigger an integer overflow...

Denial Of Service (DoS)

iperf3 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the library's integer overflow and heap corruption, which allows an attacker to crash the application by providing a maliciously crafted length field...

SUSE CVE-2023-38403

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...

Debian: Security Advisory (DSA-5455-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...