Read the docs

esnet

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

esnet records in CISA KEV

No esnet vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-65296 CVE-2026-102253 · GHSA-jhpr-vprv-wh8f

iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

Priority MEDIUM 44

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00431 Published 2026-09-29 Fixed in 3.22 CWE-835
TI-2026-65176 CVE-2026-101283 · GHSA-pwcx-5qh6-2pxc

Heap-based buffer overflow in esnet iperf3

Priority MEDIUM 42

iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated clie…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00383 Published 2026-09-30 No fix listed CWE-122
TI-2026-65170 CVE-2026-101276 · GHSA-pmgg-x2vj-36cv

Use after free in esnet iperf3

Priority MEDIUM 42

iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dere…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00396 Published 2026-09-30 No fix listed CWE-416
Open these records in search →