iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
Priority HIGH 72CWE-476Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-476.
Summary
iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00913 60th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 10 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:es:iperf3:3.17.1:*:*:*:*:*:*:* | 3.17.1 | Vulnerable | ES |
| cpe:2.3:a:netapp:ontap_9:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:o:netapp:hci_compute_node:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
- cpe:2.3:a:es:iperf3:3.17.1:*:*:*:*:*:*:* Versions 3.17.1 Vulnerable ·ES
- cpe:2.3:a:netapp:ontap_9:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:o:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
Remediation
Red Hat 10 advisories
- RHSA-2025:0570 Released 2025-01-21 · Red Hat rating Importantiperf3 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) iperf3-3.9-10.el9_0.1
- RHSA-2025:0548 Released 2025-01-21 · Red Hat rating Importantiperf3 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) iperf3-3.5-7.el8_4.1
- Red Hat Enterprise Linux AppStream E4S (v.8.4) iperf3-3.5-7.el8_4.1
- Red Hat Enterprise Linux AppStream TUS (v.8.4) iperf3-3.5-7.el8_4.1
- RHSA-2025:0505 Released 2025-01-21 · Red Hat rating Importantiperf3 security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) iperf3-3.9-11.el9_4.1
Show 7 more Red Hat advisories
- RHSA-2025:0440 Released 2025-01-20 · Red Hat rating Importantiperf3 security update
- Red Hat Enterprise Linux AppStream EUS (v.9.2) iperf3-3.9-10.el9_2.1
- RHSA-2025:0404 Released 2025-01-20 · Red Hat rating Importantiperf3 security update
- Red Hat Enterprise Linux AppStream EUS (v.8.8) iperf3-3.5-7.el8_8.1
- RHSA-2025:0402 Released 2025-01-20 · Red Hat rating Importantiperf3 security update
- Red Hat Enterprise Linux Server (v. 7 ELS) iperf3-3.1.7-3.el7_9.1, iperf3-3.1.7-3.el7_9.1.ppc
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) iperf3-devel-3.1.7-3.el7_9.1, iperf3-devel-3.1.7-3.el7_9.1.ppc
- RHSA-2025:0403 Released 2025-01-20 · Red Hat rating Importantiperf3 security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) iperf3-3.5-4.el8_2.1
- RHSA-2025:0346 Released 2025-01-15 · Red Hat rating Importantiperf3 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) iperf3-3.5-7.el8_6.1
- Red Hat Enterprise Linux AppStream E4S (v.8.6) iperf3-3.5-7.el8_6.1
- Red Hat Enterprise Linux AppStream TUS (v.8.6) iperf3-3.5-7.el8_6.1
- RHSA-2025:0168 Released 2025-01-09 · Red Hat rating Importantiperf3 security update
- Red Hat Enterprise Linux AppStream (v. 8) iperf3-3.5-11.el8_10
- RHSA-2025:0161 Released 2025-01-09 · Red Hat rating Importantiperf3 security update
- Red Hat Enterprise Linux AppStream (v. 9) iperf3-3.9-13.el9_5.1
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2025:0168 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2025:0161 |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Fixed | RHSA-2025:0403 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2025:0548 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2025:0346 |
| Red Hat Enterprise Linux AppStream E4S (v.8.4) | Fixed | RHSA-2025:0548 |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Fixed | RHSA-2025:0346 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2025:0570 |
| Red Hat Enterprise Linux AppStream EUS (v.8.8) | Fixed | RHSA-2025:0404 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2025:0440 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2025:0505 |
| Red Hat Enterprise Linux AppStream TUS (v.8.4) | Fixed | RHSA-2025:0548 |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Fixed | RHSA-2025:0346 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2025:0402 |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Fixed | RHSA-2025:0402 |
Timeline
- 2026-10-02 Threatist record created from CVE-2024-53580
- 2026-10-03 Alias added: GHSA-2w89-5px3-fvx6
References
Sources
- CVE-2024-53580 · CVE Program
- CVE-2024-53580 · NVD
- FIRST EPSS
- GHSA-2w89-5px3-fvx6 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-53580 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences