Skip to content
OpenAdvisories

Package · Debian

iperf3

12 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-102253 Public exploit

    iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

    iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter messa…

  • High 7.5
    CVE-2026-71217 Public exploit

    Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion

    A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validatio…