Vulnerabilities

TI-2025-34173 CVE-2025-54351 · GHSA-xjwm-4pfw-49g2

In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).

MEDIUM 43

In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00468 Published 2025-08-03 Fixed in 3.19.1 CWE-420

TI-2025-34172 CVE-2025-54350 · GHSA-r6x8-74x9-5mc9

LOW 25

In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00478 Published 2025-08-03 Partial fix · 3.19.1 CWE-617

TI-2025-34171 CVE-2025-54349 · GHSA-8xx8-qrh3-q8mq

MEDIUM 43

In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00468 Published 2025-08-03 Fixed in 3.19.1 CWE-193