Medium ELSA-2026-1592 1 CVE

Moderate: iperf3 security update (Oracle Linux 8)

Published Jan 29, 2026 · Updated Jan 29, 2026

Ecosystem: Oracle Linux

Summary

[3.5-12]
- Resolves: RHEL-136175 - iperf Heap Buffer Overflow (CVE-2025-54349)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	iperf3	0:3.5-12.el8_10

Vulnerabilities 1

Medium 6.5

CVE-2025-54349

In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

ES iperf3 iperf3 iperf3 Debian Ubuntu Azure Linux Alpine

Aug 3, 2025