CVE-2025-54350

概要

参考情報

• esnet/iperf commit 4eab661 · Patch
• esnet/iperf release 3.19.1 · Release Notes
• lists.debian.org/debian-lts-announce/2025/08/msg00020.html

iperf3 のその他の脆弱性

• CVE-2025-54351緊急 10.0In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).
• CVE-2025-54349緊急 10.0In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.
• CVE-2024-53580高 7.5iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
• CVE-2024-26306中 5.9iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption …
• CVE-2023-7250中 5.3A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send…