MEDIUM🇬🇧 English

CVE-2025-54349

CVSS 6.5v3.1pub. 2025-08-03upd. 2025-11-03

In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

  • Es Iperf3

    APP
    Es
    3.2 – 3.19.1 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2016-4303CRITICAL9.8ten sam produkt

The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote atta...

CVE-2025-54351HIGH8.9ten sam produkt

In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).

CVE-2024-53580HIGH7.5ten sam produkt

iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.

CVE-2023-38403HIGH7.5ten sam produkt

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

CVE-2024-26306MEDIUM5.9ten sam produkt

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing s...