Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | iperf3 | 0:3.5-10.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | iperf3-debuginfo | 0:3.5-10.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | iperf3-debugsource | 0:3.5-10.el8_10 |
Vulnerabilities 2
-
Medium 5.9
iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side chann…
-
Medium 5.3
Iperf3: possible denial of service
A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2244707
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2270270
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4241.json
-
report
https://access.redhat.com/security/cve/CVE-2023-7250
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-7250
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-7250
-
report
https://access.redhat.com/security/cve/CVE-2024-26306
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-26306
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-26306