Red Hat Security Advisory

RHSA-2023:4326

iperf3 security update

Released 2023-07-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) iperf3-3.1.7-3.el7_9
Red Hat Enterprise Linux Client Optional (v. 7) iperf3-devel-3.1.7-3.el7_9
Red Hat Enterprise Linux ComputeNode Optional (v. 7) iperf3-devel-3.1.7-3.el7_9
Red Hat Enterprise Linux Server (v. 7) iperf3-3.1.7-3.el7_9, iperf3-3.1.7-3.el7_9.ppc
Red Hat Enterprise Linux Server Optional (v. 7) iperf3-devel-3.1.7-3.el7_9, iperf3-devel-3.1.7-3.el7_9.ppc
Red Hat Enterprise Linux Workstation (v. 7) iperf3-3.1.7-3.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) iperf3-devel-3.1.7-3.el7_9

TI-2023-19787 CVE-2023-38403 · GHSA-hgwq-wchh-f9vv

MEDIUM 43

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01957 Published 2023-07-17 Fixed CWE-190