Description
A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | iperf3 | 3.15-1 | — |
| Debian 13 | iperf3 | 3.15-1 | — |
| Debian 12 | iperf3 | No fix yet | — |
| Debian 11 | iperf3 | 3.9-1+deb11u2 | DLA-4032-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | iperf3 | 3.18-2ubuntu0.1 | USN-7970-1 |
| Ubuntu 22.04 LTS | iperf3 | 3.9-1+deb11u1ubuntu0.1 | USN-7970-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | iperf3 | 3.16-1ubuntu0.1~esm1 | USN-7970-1 |
| Ubuntu Pro 20.04 LTS | iperf3 | 3.7-3ubuntu0.1~esm1 | USN-7970-1 |
| Ubuntu Pro 18.04 LTS | iperf3 | 3.1.3-1ubuntu0.1~esm1 | — |
| Ubuntu Pro 16.04 LTS | iperf3 | 3.0.11-1ubuntu0.1~esm2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | iperf3 | 3.9-13.el9 | RHSA-2024:9185 |
| RHEL 8 | iperf3 | 3.5-10.el8_10 | RHSA-2024:4241 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | iperf3 | 3.9-13.el9 | ALSA-2024:9185 |
| AlmaLinux 8 | iperf3 | 3.5-10.el8_10 | ALSA-2024:4241 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | iperf3 | 3.9-13.el9_5.1 | RLSA-2024:9185 |
| Rocky Linux 8 | iperf3 | 3.5-10.el8_10 | RLSA-2024:4241 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | iperf3 +1 | 3.1.7-2.amzn2.0.4 | ALAS2-2024-2579 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | iperf3 | 3.17-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | iperf3 | 3.9-13.el9 | ELSA-2024-9185 |
| Oracle Linux 8 | iperf3 | 3.5-10.el8_10 | ELSA-2024-4241 |
Advisories 16
- ALSA-2024:9185 Moderate: iperf3 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:4241 Moderate: iperf3 security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-7970-1 iperf3 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- RHSA-2024:9185 Red Hat Security Advisory: iperf3 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:4241 Red Hat Security Advisory: iperf3 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- DLA-4032-1 iperf3 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2024-1510 Red Hat Enterprise Linux (iperf3): Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 15, 2026
- RLSA-2024:9185 Moderate: iperf3 security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:4241 Moderate: iperf3 security update Rocky Linux Security Advisories · May 7, 2025
- ICSA-25-044-09 Siemens SCALANCE W700 IEEE 802.11ax CISA ICS & IT advisories · May 6, 2025
- NCSC-2025-0061 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 14, 2025
- NCSC-2025-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 11, 2025
- SSA-769027 SSA-769027: Multiple Vulnerabilities fixed in SCALANCE W700 IEEE 802.11ax devices before V3.0.0 Siemens ProductCERT · Feb 11, 2025
- ELSA-2024-9185 Moderate: iperf3 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 14, 2024
- ELSA-2024-4241 Moderate: iperf3 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 3, 2024
- ALAS2-2024-2579 Moderate: iperf3 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jun 24, 2024
References
- RHSA-2024:4241 vendor-advisory
- RHSA-2024:9185 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-7250 vdb-entry
- RHBZ#2244707 issue-tracking