CVE-2023-38403: es iperf3 – CVSS 7.5 · Watchpost

← All vulnerabilities

CVE-2023-38403

ALTO 7.5CVE-2023-38403 · Published 17/07/2023 · updated 17/06/2026

In breve

CVE-2023-38403 è una vulnerabilità ALTO (CVSS 7.5) che riguarda iperf3 (es).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.0%, superiore al 80.3% delle vulnerabilità.
Correzione: aggiornare a 3.14 o successiva.

Package	Affected versions	Patched versions
iperf3 es	`< 3.14`	`3.14`

Description

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

References

seclists.org/fulldisclosure/2023/Oct/24 · Mailing List
seclists.org/fulldisclosure/2023/Oct/26 · Mailing List
bugs.debian.org/1040830 · Third Party Advisory
cwe.mitre.org/data/definitions/130.html · Third Party Advisory
downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc · Vendor Advisory
esnet/iperf commit 0ef1515 · Patch
esnet/iperf · Issue Tracking
lists.debian.org/debian-lts-announce/2023/07/msg00025.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BV6EBWWF4PEQKROEVXGYSTIT2MGBTLU7 · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M25Z5FHTO3XWMGP37JHJ7IIIHSGCLKEV · Mailing List
security.netapp.com/advisory/ntap-20230818-0016 · Third Party Advisory
support.apple.com/kb/HT213984 · Release Notes
support.apple.com/kb/HT213985 · Release Notes

Altre vulnerabilità di iperf3

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free