Red Hat Security Advisory

RHSA-2024:9185

iperf3 security update

Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) iperf3-3.9-13.el9

Fixes 2 records

TI-2024-17387 CVE-2024-26306 · GHSA-x8qh-8j65-v4j9

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA…

LOW 29

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01098 Published 2024-05-13 Partial fix CWE-385

TI-2023-06634 CVE-2023-7250 · GHSA-g636-8hgg-7gx9

Iperf3: possible denial of service

LOW 26

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00932 Published 2024-03-18 Partial fix · 3.5-10.el8_10, 3.9-13.el9 CWE-183