Skip to content
OpenAdvisories
High ELSA-2026-88207 1 CVE

Important: iperf3 security update (Oracle Linux 10)

Published Oct 22, 2026 · Updated Oct 22, 2026

Ecosystem: Oracle Linux

Summary

[3.17.1-6.2]
- DoS via UDP receive worker infinite loop (CVE-2026-102253)
- Resolves: RHEL-273152

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 iperf3 0:3.17.1-6.el10_2.2

Vulnerabilities 1

  • High 7.5
    CVE-2026-102253 Public exploit

    iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

    iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter messa…

    esnet iperf3 iperf3 iperf3 Debian Ubuntu Azure Linux