Summary
Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.
Security Fix(es):
* iperf3: iperf3: Denial of Service via UDP receive worker infinite loop (CVE-2026-102253)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | iperf3 | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3 | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3 | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3 | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3-debuginfo | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3-debuginfo | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3-debuginfo | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3-debuginfo | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3-debugsource | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3-debugsource | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3-debugsource | 0:3.21-2.el10_3.1 |
| Rocky Linux · 10 | iperf3-debugsource | 0:3.21-2.el10_3.1 |
Vulnerabilities 1
-
High 7.5CVE-2026-102253 Public exploit
iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter messa…