CVEvulnerability
CVE-2023-7250
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-183
Description
A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.
Affected configurations
• es iperf3 (< 3.15)
• redhat enterprise linux 8.0
• redhat enterprise linux 9.0
• redhat enterprise linux for arm 64 8.0 aarch64
• redhat enterprise linux for arm 64 9.0 aarch64
• redhat enterprise linux for ibm z systems 8.0 s390x
• redhat enterprise linux for ibm z systems 9.0 s390x
• redhat enterprise linux for power little endian 8.0 ppc64le
Related
Weakness · CWE (1)
- CWE-183 Permissive List of Allowed Inputs weakness
References
- https://access.redhat.com/errata/RHSA-2024:4241 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:9185 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-7250 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2244707 Issue Tracking, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:4241 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-7250 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2244707 Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/01/msg00027.html lists.debian.org