Vulnerability-Lookup

OESA-2026-3527 (CVE-2026-71217)

Vulnerability from osv_openeuler – Published: 2026-08-30 04:14 – Updated: 2026-08-30 04:14 – Source website

Summary

iperf3 security update

Details

Iperf is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, protocols, and buffers.

Security Fix(es):

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server.(CVE-2026-71217)

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-71217	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "iperf3-3.21-2.oe2403sp3.aarch64.rpm",
          "iperf3-debuginfo-3.21-2.oe2403sp3.aarch64.rpm",
          "iperf3-debugsource-3.21-2.oe2403sp3.aarch64.rpm",
          "iperf3-devel-3.21-2.oe2403sp3.aarch64.rpm"
        ],
        "noarch": [
          "iperf3-help-3.21-2.oe2403sp3.noarch.rpm"
        ],
        "src": [
          "iperf3-3.21-2.oe2403sp3.src.rpm"
        ],
        "x86_64": [
          "iperf3-3.21-2.oe2403sp3.x86_64.rpm",
          "iperf3-debuginfo-3.21-2.oe2403sp3.x86_64.rpm",
          "iperf3-debugsource-3.21-2.oe2403sp3.x86_64.rpm",
          "iperf3-devel-3.21-2.oe2403sp3.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP3",
        "name": "iperf3",
        "purl": "pkg:rpm/openEuler/iperf3\u0026distro=openEuler-24.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.21-2.oe2403sp3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "iperf3-3.21-2.oe2403sp4.aarch64.rpm",
          "iperf3-debuginfo-3.21-2.oe2403sp4.aarch64.rpm",
          "iperf3-debugsource-3.21-2.oe2403sp4.aarch64.rpm",
          "iperf3-devel-3.21-2.oe2403sp4.aarch64.rpm"
        ],
        "noarch": [
          "iperf3-help-3.21-2.oe2403sp4.noarch.rpm"
        ],
        "src": [
          "iperf3-3.21-2.oe2403sp4.src.rpm"
        ],
        "x86_64": [
          "iperf3-3.21-2.oe2403sp4.x86_64.rpm",
          "iperf3-debuginfo-3.21-2.oe2403sp4.x86_64.rpm",
          "iperf3-debugsource-3.21-2.oe2403sp4.x86_64.rpm",
          "iperf3-devel-3.21-2.oe2403sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP4",
        "name": "iperf3",
        "purl": "pkg:rpm/openEuler/iperf3\u0026distro=openEuler-24.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.21-2.oe2403sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "iperf3-3.21-2.oe2003sp4.aarch64.rpm",
          "iperf3-debuginfo-3.21-2.oe2003sp4.aarch64.rpm",
          "iperf3-debugsource-3.21-2.oe2003sp4.aarch64.rpm",
          "iperf3-devel-3.21-2.oe2003sp4.aarch64.rpm"
        ],
        "noarch": [
          "iperf3-help-3.21-2.oe2003sp4.noarch.rpm"
        ],
        "src": [
          "iperf3-3.21-2.oe2003sp4.src.rpm"
        ],
        "x86_64": [
          "iperf3-3.21-2.oe2003sp4.x86_64.rpm",
          "iperf3-debuginfo-3.21-2.oe2003sp4.x86_64.rpm",
          "iperf3-debugsource-3.21-2.oe2003sp4.x86_64.rpm",
          "iperf3-devel-3.21-2.oe2003sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP4",
        "name": "iperf3",
        "purl": "pkg:rpm/openEuler/iperf3\u0026distro=openEuler-20.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.21-2.oe2003sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "iperf3-3.21-2.oe2203sp4.aarch64.rpm",
          "iperf3-debuginfo-3.21-2.oe2203sp4.aarch64.rpm",
          "iperf3-debugsource-3.21-2.oe2203sp4.aarch64.rpm",
          "iperf3-devel-3.21-2.oe2203sp4.aarch64.rpm"
        ],
        "noarch": [
          "iperf3-help-3.21-2.oe2203sp4.noarch.rpm"
        ],
        "src": [
          "iperf3-3.21-2.oe2203sp4.src.rpm"
        ],
        "x86_64": [
          "iperf3-3.21-2.oe2203sp4.x86_64.rpm",
          "iperf3-debuginfo-3.21-2.oe2203sp4.x86_64.rpm",
          "iperf3-debugsource-3.21-2.oe2203sp4.x86_64.rpm",
          "iperf3-devel-3.21-2.oe2203sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP4",
        "name": "iperf3",
        "purl": "pkg:rpm/openEuler/iperf3\u0026distro=openEuler-22.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.21-2.oe2203sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "iperf3-3.21-2.oe2403sp1.aarch64.rpm",
          "iperf3-debuginfo-3.21-2.oe2403sp1.aarch64.rpm",
          "iperf3-debugsource-3.21-2.oe2403sp1.aarch64.rpm",
          "iperf3-devel-3.21-2.oe2403sp1.aarch64.rpm"
        ],
        "noarch": [
          "iperf3-help-3.21-2.oe2403sp1.noarch.rpm"
        ],
        "src": [
          "iperf3-3.21-2.oe2403sp1.src.rpm"
        ],
        "x86_64": [
          "iperf3-3.21-2.oe2403sp1.x86_64.rpm",
          "iperf3-debuginfo-3.21-2.oe2403sp1.x86_64.rpm",
          "iperf3-debugsource-3.21-2.oe2403sp1.x86_64.rpm",
          "iperf3-devel-3.21-2.oe2403sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP1",
        "name": "iperf3",
        "purl": "pkg:rpm/openEuler/iperf3\u0026distro=openEuler-24.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.21-2.oe2403sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "Iperf is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, protocols, and buffers.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server.(CVE-2026-71217)",
  "id": "OESA-2026-3527",
  "modified": "2026-08-30T04:14:54Z",
  "published": "2026-08-30T04:14:54Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3527"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71217"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "iperf3 security update",
  "upstream": [
    "CVE-2026-71217"
  ]
}

CVE-2026-71217 (GCVE-0-2026-71217)

Vulnerability from cvelistv5 – Published: 2026-08-11 08:50 – Updated: 2026-08-31 16:00

Title

Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion

Summary

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-11 16:11 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:61257	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61389	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61680	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-71217	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2460984	issue-trackingx_refsource_REDHAT
https://github.com/esnet/iperf/commit/494dd377eca…

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.17.1-6.el10_2.1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.5-12.el8_10.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.9-17.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

Date Public

2026-08-11 08:13

Credits

This issue was discovered by Found by AISLE in partnership with Red Hat.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-71217",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-11T16:11:03.827772Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T16:11:15.858Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.17.1-6.el10_2.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.5-12.el8_10.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.9-17.el9_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "This issue was discovered by Found by AISLE in partnership with Red Hat."
        }
      ],
      "datePublic": "2026-08-11T08:13:48.497Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-31T16:00:56.818Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:61257",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:61257"
        },
        {
          "name": "RHSA-2026:61389",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:61389"
        },
        {
          "name": "RHSA-2026:61680",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:61680"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-71217"
        },
        {
          "name": "RHBZ#2460984",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460984"
        },
        {
          "url": "https://github.com/esnet/iperf/commit/494dd377eca4689672becdf06a85158557db1586"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-23T00:59:49.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-11T08:13:48.497Z",
          "value": "Made public."
        }
      ],
      "title": "Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, restrict network access to the `iperf3` server to trusted clients or networks using firewall rules. If the `iperf3` server functionality is not required, disable the `iperf3` service."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-20: Improper Input Validation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-71217",
    "datePublished": "2026-08-11T08:50:10.140Z",
    "dateReserved": "2026-08-05T08:41:54.899Z",
    "dateUpdated": "2026-08-31T16:00:56.818Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.