Vendors / ES Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 2
Exploited now ES records in CISA KEV No ES vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00913 · Published 2024-12-18 · Fixed CWE-476
Priority MEDIUM 52
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string,…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06963 · Published 2016-09-26 · No fix listed CWE-120
Priority MEDIUM 43
In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00468 · Published 2025-08-03 · Fixed in 3.19.1 CWE-420
Priority MEDIUM 43
In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00468 · Published 2025-08-03 · Fixed in 3.19.1 CWE-193
Priority MEDIUM 43
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01957 · Published 2023-07-17 · Fixed CWE-190
Priority LOW 29
iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01098 · Published 2024-05-13 · Partial fix CWE-385
Priority LOW 26
A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00932 · Published 2024-03-18 · Partial fix · 3.5-10.el8_10, 3.9-13.el9 CWE-183
Priority LOW 25
In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00478 · Published 2025-08-03 · Partial fix · 3.19.1 CWE-617
Open these records in search → All records by CVSS severity
3 2 3 0 0
THREATIST.IORead the docs