Red Hat Security Advisory: iperf3 security update

Fixed packages 3

Vulnerabilities 2

• Medium 5.9
  CVE-2024-26306

  iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side chann…

  iperf3 iperf3 iperf3 Debian Ubuntu Azure Linux
  May 13, 2024
• Medium 5.3
  CVE-2023-7250

  Iperf3: possible denial of service

  A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Mar 18, 2024

References

• article
  https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2244707
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270270
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9185.json
• report
  https://access.redhat.com/security/cve/CVE-2023-7250
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-7250
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-7250
• report
  https://access.redhat.com/security/cve/CVE-2024-26306
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26306
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26306