IP
Product
Iperf3
8
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 3Low 0
Watch
Add Iperf3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54351 | 10.0 | Aug 3 | In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv) Affected: 3.19 |
| CVE-2025-54349 | 10.0 | Aug 3 | In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow Affected: 3.2 before 3.19.1 |
| CVE-2016-4303 | 9.8 | Sep 26 | The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code… Affected: 3.0 before 3.0.12; 3.1 before 3.1.3 |
| CVE-2024-53580 | 7.5 | Dec 18 | iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function Affected: 3.17.1 |
| CVE-2023-38403 | 7.5 | Jul 17 | iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field Affected: before 3.14 |
| CVE-2024-26306 | 5.9 | May 14 | iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations Affected: before 3.17 |
| CVE-2025-54350 | 5.3 | Aug 3 | In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt Affected: 3.2 before 3.19.1 |
| CVE-2023-7250 | 5.3 | Mar 18 | A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP Affected: before 3.15 |
Showing 8