CVE-2024-53580

Mô tả

Tham khảo

• gist.github.com/neolead/663badf2ebefefa6fe4303695e7aa7a3 · Exploit
• esnet/iperf release 3.18 · Release Notes
• lists.debian.org/debian-lts-announce/2025/01/msg00027.html
• security.netapp.com/advisory/ntap-20250404-0009 · Third Party Advisory

Lỗ hổng khác của iperf3

• CVE-2025-54351NGHIÊM TRỌNG 10.0In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).
• CVE-2025-54350TRUNG BÌNH 5.3In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt.
• CVE-2025-54349NGHIÊM TRỌNG 10.0In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.
• CVE-2024-26306TRUNG BÌNH 5.9iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption …
• CVE-2023-7250TRUNG BÌNH 5.3A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send…