Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-54350: In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. CVE-2025-54349: In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | iperf3 | 0:3.19.1-1.amzn2023 |
| Amazon Linux · 2023 | iperf3-debuginfo | 0:3.19.1-1.amzn2023 |
| Amazon Linux · 2023 | iperf3-debugsource | 0:3.19.1-1.amzn2023 |
| Amazon Linux · 2023 | iperf3-devel | 0:3.19.1-1.amzn2023 |
Vulnerabilities 2
-
Medium 6.5
In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.
-
Low 3.7
In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authent…