Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-7250
HistoryMar 18, 2024 - 12:00 a.m.

CVE-2023-7250

2024-03-1800:00:00
ubuntu.com
ubuntu.com
45
iperf
network performance
server hang
denial of service
tcp
udp
sctp

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

15.8%

A flaw was found in iperf, a utility for testing network performance using
TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than
the expected amount of data to the iperf server, which can cause the server
to hang indefinitely waiting for the remainder or until the connection gets
closed. This will prevent other connections to the server, leading to a
denial of service.

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

15.8%