VDB

CISA-2023-7250

CISA-2023-7250 PUBLISHED CVSS 5.3 MEDIUM

Reported by redhat · Published March 18, 2024

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.

Risk Scores

CVSS 3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

VendorProductVersions
Red HatRed Hat Enterprise Linux 80:3.5-10.el8_10
Red HatRed Hat Enterprise Linux 90:3.9-13.el9
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Enterprise Linux 8*, 0:3.5-10.el8_10
Red HatRed Hat Enterprise Linux 90:3.9-13.el9, 0:3.9-13.el9
Red HatRed Hat Enterprise Linux 7

Timeline

  • Mar 18, 2024 CVE Published
  • Nov 6, 2025 CVE Updated
  • Apr 26, 2026 Distribution Patch
  • Apr 26, 2026 Distribution Patch
  • Apr 26, 2026 Security Advisory
  • Apr 26, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›