ROS-20250825-08

A vulnerability in the Iperf3 network bandwidth measurement tool is related to an achievable assertion in the iperfauth.c. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service A vulnerability in the Iperf3 network bandwidth measurement...

Debian: Security Advisory (DLA-4281-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4281-1] iperf3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4281-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk August 24, 2025 https://wiki.debian.org/LTS -...

DLA-4281-1 iperf3 - security update

Bulletin has no description...

Debian dla-4281 : iperf3 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4281 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4281-1 [email protected]...

TencentOS Server 4: iperf3 (TSSA-2025:0670)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0670 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2023-38403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. CVE-2023-38403 Note that Nessus relies on the...

CLSA-2025-1755006018 iperf3: Fix of CVE-2023-7250

CVE-2023-7250: fix flaw to prevent denial of service caused by malicious or malfunctioning client sending incomplete data to server...

CVE-2025-54350

A flaw was found in iperf3. A malformed Base64-encoded authentication string triggers an assertion failure within the iperfauth.c file, leading to application termination. This vulnerability allows a network attacker to induce this failure by sending a crafted authentication attempt, resulting in...

CVE-2025-54349

A flaw was found in iperf3. An off-by-one error in the iperfauth.c file leads to a heap-based buffer overflow, potentially allowing a network attacker to trigger an application-level denial of service. This overflow occurs during the processing of authentication data. The vulnerability can only b...

CVE-2025-54351

A flaw was found in iperf3. The recv function in net.c exhibits a buffer overflow when the --skip-rx-copy option is used with MSGTRUNC, allowing a network attacker to trigger the overflow. This vulnerability allows an attacker to send a specially crafted message. The resulting buffer overflow may...

AZL-66057 CVE-2025-54350 affecting package iperf3 for versions less than 3.17.1-3

In iperf before 3.19.1, iperfauth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt...

AZL-66068 CVE-2025-54350 affecting package iperf3 for versions less than 3.18-2

In iperf before 3.19.1, iperfauth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt...

AZL-66060 CVE-2025-54349 affecting package iperf3 for versions less than 3.17.1-3

In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow...

TencentOS Server 3: iperf3 (TSSA-2025:0027)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0027 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 2: iperf3 (TSSA-2025:0099)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0099 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 2: iperf3 (TSSA-2023:0166)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0166 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 4: iperf3 (TSSA-2024:0364)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0364 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: iperf3 (TSSA-2025:0001)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0001 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: iperf3 (TSSA-2024:0494)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0494 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...