Summary
[3.9-13]
- Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used
[3.9-12]
- Resolves: RHEL-39975 - possible denial of service
[3.9-11]
- Related: #2223676 - bumping version for correct update path
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | iperf3 | 0:3.9-13.el9 |
Vulnerabilities 2
-
Medium 5.9
iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side chann…
-
Medium 5.3
Iperf3: possible denial of service
A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for…