Es Iperf3
8 CVEs affecting Es Iperf3. Latest disclosed: 2025-08-03. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-4303 | Critical | 9.8 | 2016-09-26 | The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or exe… |
CVE-2025-54351 | High | 8.9 | 2025-08-03 | In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv). |
CVE-2024-53580 | High | 7.5 | 2024-12-18 | iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function. |
CVE-2023-38403 | High | 7.5 | 2023-07-17 | iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. |
CVE-2025-54349 | Medium | 6.5 | 2025-08-03 | In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow. |
CVE-2024-26306 | Medium | 5.9 | 2024-05-14 | iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This si… |
CVE-2023-7250 | Medium | 5.3 | 2024-03-18 | A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expe… |
CVE-2025-54350 | Low | 3.7 | 2025-08-03 | In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. |