VDB

GCVE-110-MAGEIA-2016-235

GCVE-110-MAGEIA-2016-235
Advisory Published
Vulnetix · Advisory published July 5, 2016
A malicious process can connect to an iperf server and, by sending a malformed message on the control channel, corrupt the server process's heap area. This can lead to a crash (and a denial of service), or theoretically a remote code execution as the user running the iperf server. A malicious iperf server could potentially mount a similar attack on an iperf client (CVE-2016-4303).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiaiperf0 (affected), 3.0.12-1.mga5 (unaffected)—

Aliases

CVE-2016-4303

References

Updated iperf packages fix security vulnerability
advisory
Updated iperf packages fix security vulnerability
issue
Updated iperf packages fix security vulnerability
issue
Updated iperf packages fix security vulnerability
issue

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›