Summary
[3.5-10]
- Resolves: RHEL-29578 - vulnerable to marvin attack if the authentication option is used
[3.5-9]
- Resolves: RHEL-17069 - possible denial of service
[3.5-8]
- Related: #2222205 - bumping nvr for correct update path
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | iperf3 | 0:3.5-10.el8_10 |
Vulnerabilities 2
-
Medium 5.9
iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side chann…
-
Medium 5.3
Iperf3: possible denial of service
A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for…