CVE-2023-38403: es iperf3 – CVSS 7.5 · Watchpost

← All vulnerabilities

CVE-2023-38403

ÉLEVÉE 7.5CVE-2023-38403 · Published 17/07/2023 · updated 17/06/2026

En bref

CVE-2023-38403 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant iperf3 (es).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.0%, plus élevée que 80.3% des vulnérabilités.
Correctif : mettre à jour vers 3.14 ou plus récent.

Package	Affected versions	Patched versions
iperf3 es	`< 3.14`	`3.14`

Description

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

References

seclists.org/fulldisclosure/2023/Oct/24 · Mailing List
seclists.org/fulldisclosure/2023/Oct/26 · Mailing List
bugs.debian.org/1040830 · Third Party Advisory
cwe.mitre.org/data/definitions/130.html · Third Party Advisory
downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc · Vendor Advisory
esnet/iperf commit 0ef1515 · Patch
esnet/iperf · Issue Tracking
lists.debian.org/debian-lts-announce/2023/07/msg00025.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BV6EBWWF4PEQKROEVXGYSTIT2MGBTLU7 · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M25Z5FHTO3XWMGP37JHJ7IIIHSGCLKEV · Mailing List
security.netapp.com/advisory/ntap-20230818-0016 · Third Party Advisory
support.apple.com/kb/HT213984 · Release Notes
support.apple.com/kb/HT213985 · Release Notes

Autres vulnérabilités de iperf3

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free