Vulnerability-Lookup

OPENSUSE-SU-2026:12060-1

Vulnerability from csaf_opensuse - Published: 2026-10-05 00:00 - Updated: 2026-10-06 10:27

Summary

iperf-3.22-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: iperf-3.22-1.1 on GA media

Description of the patch: These are all security issues fixed in the iperf-3.22-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-12060

CVE-2026-101276

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-101283

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2026-101276

Threats

Impact important

CVE-2026-102253

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2026-101276

Threats

Impact important

CVE-2026-71217

Affected products

Recommended 12 products, the same list as for CVE-2026-101276

Threats

Impact important

CVE-2026-71218

Affected products

Recommended 12 products, the same list as for CVE-2026-101276

Threats

Impact moderate

References

15 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-101276/	self
https://www.suse.com/security/cve/CVE-2026-101283/	self
https://www.suse.com/security/cve/CVE-2026-102253/	self
https://www.suse.com/security/cve/CVE-2026-71217/	self
https://www.suse.com/security/cve/CVE-2026-71218/	self
https://www.suse.com/security/cve/CVE-2026-101276	external
https://bugzilla.suse.com/1283786	external
https://www.suse.com/security/cve/CVE-2026-101283	external
https://bugzilla.suse.com/1283787	external
https://www.suse.com/security/cve/CVE-2026-102253	external
https://bugzilla.suse.com/1283528	external
https://www.suse.com/security/cve/CVE-2026-71217	external
https://www.suse.com/security/cve/CVE-2026-71218	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "iperf-3.22-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the iperf-3.22-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-12060",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12060-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-101276 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-101276/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-101283 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-101283/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-102253 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-102253/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-71217 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-71217/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-71218 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-71218/"
      }
    ],
    "title": "iperf-3.22-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-10-06T10:27:06Z",
      "generator": {
        "date": "2026-10-05T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:12060-1",
      "initial_release_date": "2026-10-05T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-10-05T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-06T10:27:06Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "iperf-0:3.22-1.1.aarch64",
                "product": {
                  "name": "iperf-0:3.22-1.1.aarch64",
                  "product_id": "iperf-0:3.22-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/iperf@3.22-1.1?arch=aarch64\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "iperf-devel-0:3.22-1.1.aarch64",
                "product": {
                  "name": "iperf-devel-0:3.22-1.1.aarch64",
                  "product_id": "iperf-devel-0:3.22-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/iperf-devel@3.22-1.1?arch=aarch64\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libiperf0-0:3.22-1.1.aarch64",
                "product": {
                  "name": "libiperf0-0:3.22-1.1.aarch64",
                  "product_id": "libiperf0-0:3.22-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libiperf0@3.22-1.1?arch=aarch64\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "iperf-0:3.22-1.1.ppc64le",
                "product": {
                  "name": "iperf-0:3.22-1.1.ppc64le",
                  "product_id": "iperf-0:3.22-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/iperf@3.22-1.1?arch=ppc64le\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "iperf-devel-0:3.22-1.1.ppc64le",
                "product": {
                  "name": "iperf-devel-0:3.22-1.1.ppc64le",
                  "product_id": "iperf-devel-0:3.22-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/iperf-devel@3.22-1.1?arch=ppc64le\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libiperf0-0:3.22-1.1.ppc64le",
                "product": {
                  "name": "libiperf0-0:3.22-1.1.ppc64le",
                  "product_id": "libiperf0-0:3.22-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libiperf0@3.22-1.1?arch=ppc64le\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "iperf-0:3.22-1.1.s390x",
                "product": {
                  "name": "iperf-0:3.22-1.1.s390x",
                  "product_id": "iperf-0:3.22-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/iperf@3.22-1.1?arch=s390x\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "iperf-devel-0:3.22-1.1.s390x",
                "product": {
                  "name": "iperf-devel-0:3.22-1.1.s390x",
                  "product_id": "iperf-devel-0:3.22-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/iperf-devel@3.22-1.1?arch=s390x\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libiperf0-0:3.22-1.1.s390x",
                "product": {
                  "name": "libiperf0-0:3.22-1.1.s390x",
                  "product_id": "libiperf0-0:3.22-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libiperf0@3.22-1.1?arch=s390x\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "iperf-0:3.22-1.1.x86_64",
                "product": {
                  "name": "iperf-0:3.22-1.1.x86_64",
                  "product_id": "iperf-0:3.22-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/iperf@3.22-1.1?arch=x86_64\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "iperf-devel-0:3.22-1.1.x86_64",
                "product": {
                  "name": "iperf-devel-0:3.22-1.1.x86_64",
                  "product_id": "iperf-devel-0:3.22-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/iperf-devel@3.22-1.1?arch=x86_64\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libiperf0-0:3.22-1.1.x86_64",
                "product": {
                  "name": "libiperf0-0:3.22-1.1.x86_64",
                  "product_id": "libiperf0-0:3.22-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libiperf0@3.22-1.1?arch=x86_64\u0026upstream=iperf-0:3.22-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "iperf-0:3.22-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64"
        },
        "product_reference": "iperf-0:3.22-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "iperf-0:3.22-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le"
        },
        "product_reference": "iperf-0:3.22-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "iperf-0:3.22-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x"
        },
        "product_reference": "iperf-0:3.22-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "iperf-0:3.22-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64"
        },
        "product_reference": "iperf-0:3.22-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "iperf-devel-0:3.22-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64"
        },
        "product_reference": "iperf-devel-0:3.22-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "iperf-devel-0:3.22-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le"
        },
        "product_reference": "iperf-devel-0:3.22-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "iperf-devel-0:3.22-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x"
        },
        "product_reference": "iperf-devel-0:3.22-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "iperf-devel-0:3.22-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64"
        },
        "product_reference": "iperf-devel-0:3.22-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libiperf0-0:3.22-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64"
        },
        "product_reference": "libiperf0-0:3.22-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libiperf0-0:3.22-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le"
        },
        "product_reference": "libiperf0-0:3.22-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libiperf0-0:3.22-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x"
        },
        "product_reference": "libiperf0-0:3.22-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libiperf0-0:3.22-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
        },
        "product_reference": "libiperf0-0:3.22-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-101276",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-101276"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server\u0027s per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-101276",
          "url": "https://www.suse.com/security/cve/CVE-2026-101276"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283786 for CVE-2026-101276",
          "url": "https://bugzilla.suse.com/1283786"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-05T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-101276"
    },
    {
      "cve": "CVE-2026-101283",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-101283"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "iperf3 3.20-3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-101283",
          "url": "https://www.suse.com/security/cve/CVE-2026-101283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283787 for CVE-2026-101283",
          "url": "https://bugzilla.suse.com/1283787"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-05T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-101283"
    },
    {
      "cve": "CVE-2026-102253",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-102253"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server\u0027s UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-102253",
          "url": "https://www.suse.com/security/cve/CVE-2026-102253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283528 for CVE-2026-102253",
          "url": "https://bugzilla.suse.com/1283528"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-05T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-102253"
    },
    {
      "cve": "CVE-2026-71217",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-71217"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-71217",
          "url": "https://www.suse.com/security/cve/CVE-2026-71217"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-05T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-71217"
    },
    {
      "cve": "CVE-2026-71218",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-71218"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of Service (DoS) through memory exhaustion, severe slowdown, or termination of the iperf3 service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
          "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-71218",
          "url": "https://www.suse.com/security/cve/CVE-2026-71218"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:iperf-devel-0:3.22-1.1.x86_64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.aarch64",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.ppc64le",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.s390x",
            "openSUSE Tumbleweed:libiperf0-0:3.22-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-05T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-71218"
    }
  ]
}

CVE-2026-101276 (GCVE-0-2026-101276)

Vulnerability from cvelistv5 – Published: 2026-09-30 21:11 – Updated: 2026-10-01 15:51

Summary

iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-01 15:50 UTC

CWE

CWE-416 - Use after free

Assigner

Anthropic mitre root Scorecard

References

1 reference

URL	Tags
https://newreleases.io/project/github/esnet/iperf…	release-notes

Impacted products

1 product

Vendor	Product	Version
esnet	iperf3	Affected: 3.21

Credits

Anthropic Ada Logics

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101276",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-01T15:50:45.814450Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-01T15:51:00.728Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iperf3",
          "vendor": "esnet",
          "versions": [
            {
              "status": "affected",
              "version": "3.21"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Anthropic"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Ada Logics"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server\u0027s per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22."
            }
          ],
          "value": "iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server\u0027s per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-456",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-456 Infected Memory"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use after free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T21:13:21.540Z",
        "orgId": "98a01053-8a31-4f6d-9aa9-252be161adc6",
        "shortName": "Anthropic"
      },
      "references": [
        {
          "tags": [
            "release-notes"
          ],
          "url": "https://newreleases.io/project/github/esnet/iperf/release/3.22"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "98a01053-8a31-4f6d-9aa9-252be161adc6",
    "assignerShortName": "Anthropic",
    "cveId": "CVE-2026-101276",
    "datePublished": "2026-09-30T21:11:52.046Z",
    "dateReserved": "2026-09-28T11:52:18.066Z",
    "dateUpdated": "2026-10-01T15:51:00.728Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-101283 (GCVE-0-2026-101283)

Vulnerability from cvelistv5 – Published: 2026-09-30 21:32 – Updated: 2026-10-01 15:51

Summary

iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-01 15:51 UTC

CWE

CWE-122 - Heap-based buffer overflow

Assigner

Anthropic mitre root Scorecard

References

1 reference

URL	Tags
https://newreleases.io/project/github/esnet/iperf…

Impacted products

1 product

Vendor	Product	Version
esnet	iperf3	Affected: 3.20 Affected: 3.21

Credits

Anthropic Ada Logics

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101283",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-01T15:51:25.364045Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-01T15:51:37.669Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iperf3",
          "vendor": "esnet",
          "versions": [
            {
              "status": "affected",
              "version": "3.20"
            },
            {
              "status": "affected",
              "version": "3.21"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Anthropic"
        },
        {
          "lang": "en",
          "type": "analyst",
          "value": "Ada Logics"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "iperf3 3.20\u20133.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22"
            }
          ],
          "value": "iperf3 3.20\u20133.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based buffer overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T21:32:14.699Z",
        "orgId": "98a01053-8a31-4f6d-9aa9-252be161adc6",
        "shortName": "Anthropic"
      },
      "references": [
        {
          "url": "https://newreleases.io/project/github/esnet/iperf/release/3.22"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "98a01053-8a31-4f6d-9aa9-252be161adc6",
    "assignerShortName": "Anthropic",
    "cveId": "CVE-2026-101283",
    "datePublished": "2026-09-30T21:32:14.699Z",
    "dateReserved": "2026-09-28T12:01:09.970Z",
    "dateUpdated": "2026-10-01T15:51:37.669Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102253 (GCVE-0-2026-102253)

Vulnerability from cvelistv5 – Published: 2026-09-29 20:11 – Updated: 2026-10-01 15:19 X_Open Source

Title

iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

Summary

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 19:25 UTC

CWE

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Assigner

VulnCheck mitre root Scorecard

References

3 references

URL	Tags
https://github.com/esnet/iperf/releases/tag/3.22	vendor-advisorypatch
https://github.com/esnet/iperf/blob/master/RELNOTES.md	release-notes
https://www.vulncheck.com/advisories/iperf3-udp-r…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
esnet	iperf3	Affected: 3.14 , < 3.22 (custom) cpe:2.3:a:es:iperf3::::::::

Date Public

2026-09-29 00:00

Credits

Ravindu Lakmina Munaweera VulnCheck

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102253",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T19:25:42.477583Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T19:25:56.306Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:github/esnet/iperf",
          "product": "iperf3",
          "repo": "https://github.com/esnet/iperf",
          "vendor": "esnet",
          "versions": [
            {
              "lessThan": "3.22",
              "status": "affected",
              "version": "3.14",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:es:iperf3:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.22",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ravindu Lakmina Munaweera"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulnCheck"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server\u0027s UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-01T15:19:47.164Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Vendor Patch",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://github.com/esnet/iperf/releases/tag/3.22"
        },
        {
          "name": "Vendor Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/esnet/iperf/blob/master/RELNOTES.md"
        },
        {
          "name": "VulnCheck Advisory",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/iperf3-udp-receive-worker-infinite-loop-dos"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "tags": [
        "x_open-source"
      ],
      "title": "iperf3 \u003c 3.22 UDP Receive Worker Infinite Loop DoS",
      "x_generator": {
        "engine": "vulncheck"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-102253",
    "datePublished": "2026-09-29T20:11:47.089Z",
    "dateReserved": "2026-09-28T19:17:36.656Z",
    "dateUpdated": "2026-10-01T15:19:47.164Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-71217 (GCVE-0-2026-71217)

Vulnerability from cvelistv5 – Published: 2026-08-11 08:50 – Updated: 2026-08-31 16:00

Title

Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion

Summary

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-11 16:11 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

redhat redhat root Scorecard

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:61257	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61389	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61680	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-71217	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2460984	issue-trackingx_refsource_REDHAT
https://github.com/esnet/iperf/commit/494dd377eca…

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.17.1-6.el10_2.1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.5-12.el8_10.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.9-17.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

Date Public

2026-08-11 08:13

Credits

This issue was discovered by Found by AISLE in partnership with Red Hat.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-71217",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-11T16:11:03.827772Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T16:11:15.858Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.17.1-6.el10_2.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.5-12.el8_10.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.9-17.el9_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "This issue was discovered by Found by AISLE in partnership with Red Hat."
        }
      ],
      "datePublic": "2026-08-11T08:13:48.497Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-31T16:00:56.818Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:61257",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:61257"
        },
        {
          "name": "RHSA-2026:61389",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:61389"
        },
        {
          "name": "RHSA-2026:61680",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:61680"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-71217"
        },
        {
          "name": "RHBZ#2460984",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460984"
        },
        {
          "url": "https://github.com/esnet/iperf/commit/494dd377eca4689672becdf06a85158557db1586"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-23T00:59:49.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-11T08:13:48.497Z",
          "value": "Made public."
        }
      ],
      "title": "Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, restrict network access to the `iperf3` server to trusted clients or networks using firewall rules. If the `iperf3` server functionality is not required, disable the `iperf3` service."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-20: Improper Input Validation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-71217",
    "datePublished": "2026-08-11T08:50:10.140Z",
    "dateReserved": "2026-08-05T08:41:54.899Z",
    "dateUpdated": "2026-08-31T16:00:56.818Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-71218 (GCVE-0-2026-71218)

Vulnerability from cvelistv5 – Published: 2026-08-11 08:51 – Updated: 2026-08-11 13:00

Title

Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion

Summary

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of Service (DoS) through memory exhaustion, severe slowdown, or termination of the iperf3 service.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-11 12:54 UTC

CWE

CWE-789 - Memory Allocation with Excessive Size Value

Assigner

redhat redhat root Scorecard

References

3 references

URL	Tags
https://access.redhat.com/security/cve/CVE-2026-71218	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2463003	issue-trackingx_refsource_REDHAT
https://github.com/esnet/iperf/commit/0128d0357b7…

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2026-08-11 08:13

Credits

This issue was discovered by Found by AISLE in partnership with Red Hat.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-71218",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-11T12:54:34.803644Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T13:00:19.528Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "iperf3",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "This issue was discovered by Found by AISLE in partnership with Red Hat."
        }
      ],
      "datePublic": "2026-08-11T08:13:07.439Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of Service (DoS) through memory exhaustion, severe slowdown, or termination of the iperf3 service."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-789",
              "description": "Memory Allocation with Excessive Size Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T10:20:34.420Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-71218"
        },
        {
          "name": "RHBZ#2463003",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463003"
        },
        {
          "url": "https://github.com/esnet/iperf/commit/0128d0357b7e8916fe39e980e455729bc0e5fd4e"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-26T20:37:37.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-11T08:13:07.439Z",
          "value": "Made public."
        }
      ],
      "title": "Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, restrict network access to the `iperf3` control port, ensuring it is only reachable by trusted clients. This can be achieved by configuring firewall rules to limit inbound connections to the `iperf3` service. Additionally, consider running the `iperf3` service within environments that enforce process or container memory limits to further contain potential resource exhaustion. Note that authentication alone is insufficient as the memory allocation occurs before authentication checks."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-789: Memory Allocation with Excessive Size Value"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-71218",
    "datePublished": "2026-08-11T08:51:24.805Z",
    "dateReserved": "2026-08-05T08:41:54.899Z",
    "dateUpdated": "2026-08-11T13:00:19.528Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2026:12060-1

CVE-2026-101276 (GCVE-0-2026-101276)

CVE-2026-101283 (GCVE-0-2026-101283)

CVE-2026-102253 (GCVE-0-2026-102253)

CVE-2026-71217 (GCVE-0-2026-71217)

CVE-2026-71218 (GCVE-0-2026-71218)

Tags

Sightings

Nomenclature

Related by attack behaviour