Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: esnet Clear all filters
TI-2026-65176 CVE-2026-101283 · GHSA-pwcx-5qh6-2pxc

Heap-based buffer overflow in esnet iperf3

Priority MEDIUM 42

iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated clie…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00383 Published 2026-09-30 No fix listed CWE-122
TI-2026-65170 CVE-2026-101276 · GHSA-pmgg-x2vj-36cv

Use after free in esnet iperf3

Priority MEDIUM 42

iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dere…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00396 Published 2026-09-30 No fix listed CWE-416
TI-2026-65296 CVE-2026-102253 · GHSA-jhpr-vprv-wh8f

iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

Priority MEDIUM 44

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00431 Published 2026-09-29 Fixed in 3.22 CWE-835