IP
Product
iperf3
3
CVEs
0
On KEV
9.2
Max CVSS
3
New 30D
Severity mix
Critical 2High 1Medium 0Low 0
Watch
Add iperf3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-101283 | 9.2 | Sep 30 | iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length… Affected: 3.20; 3.21 |
| CVE-2026-101276 | 9.2 | Sep 30 | iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their… Affected: 3.21 |
| CVE-2026-102253 | 7.5 | Sep 29 | iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS Affected: 3.14 before 3.22 |
Showing 3