CVE-2023-38403

Mô tả

Tham khảo

• seclists.org/fulldisclosure/2023/Oct/24 · Mailing List
• seclists.org/fulldisclosure/2023/Oct/26 · Mailing List
• bugs.debian.org/1040830 · Third Party Advisory
• cwe.mitre.org/data/definitions/130.html · Third Party Advisory
• downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc · Vendor Advisory
• esnet/iperf commit 0ef1515 · Patch
• esnet/iperf · Issue Tracking
• lists.debian.org/debian-lts-announce/2023/07/msg00025.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BV6EBWWF4PEQKROEVXGYSTIT2MGBTLU7 · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M25Z5FHTO3XWMGP37JHJ7IIIHSGCLKEV · Mailing List
• security.netapp.com/advisory/ntap-20230818-0016 · Third Party Advisory
• support.apple.com/kb/HT213984 · Release Notes
• support.apple.com/kb/HT213985 · Release Notes

Lỗ hổng khác của iperf3

• CVE-2025-54351NGHIÊM TRỌNG 10.0In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).
• CVE-2025-54350TRUNG BÌNH 5.3In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt.
• CVE-2025-54349NGHIÊM TRỌNG 10.0In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.
• CVE-2024-53580CAO 7.5iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
• CVE-2024-26306TRUNG BÌNH 5.9iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption …