{"id":"CVE-2026-102253","aliases":["ALSA-2026:88207","AZL-105051","BELL-CVE-2026-102253","DEBIAN-CVE-2026-102253","EUVD-2026-89415","GHSA-jhpr-vprv-wh8f","MGASA-2026-0539","RLSA-2026:88207","SUSE-SU-2026:24178-1","SUSE-SU-2026:24234-1","SUSE-SU-2026:4678-1","UBUNTU-CVE-2026-102253","openSUSE-SU-2026:12060-1","openSUSE-SU-2026:22090-1"],"status":"published","title":"iperf3 \u003c 3.22 UDP Receive Worker Infinite Loop DoS","description":"iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00431,"percentile":0.37583,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-835"],"published":"2026-09-29T20:11:47Z","modified":"2026-11-08T14:00:43Z","exploits":[{"source":"pocgithub","id":"Ravi-lk/CVE-2026-102253-POC","title":"Ravi-lk/CVE-2026-102253-POC","date":"2026-10-07","url":"https://github.com/Ravi-lk/CVE-2026-102253-POC"}],"fixes":[{"ecosystem":"AlmaLinux:10","package":"iperf3","fixed_in":["3.17.1-6.el10_2.2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"iperf3","fixed_in":["3.17.1-7"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"iperf3","fixed_in":["3.22-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"iperf3","fixed_in":["3.22-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"iperf3","fixed_in":["3.22-r0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"iperf3","fixed_in":["3.22-0.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"iperf3","fixed_in":["0:3.17.1-6.el10_2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.1-6.el10_2.2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.1-7"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12-r0"},{"fixed":"3.22-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.19-r0"},{"fixed":"3.22-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12-r0"},{"fixed":"3.22-r0"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.18-2","3.18-2+deb13u1","3.18-2+deb13u2","3.19.1-1","3.19.1-2","3.20-1","3.20-2","3.20-2.1","3.22-0.1"]},{"source":"osv","ecosystem":"Debian:14","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-0.1"}]}],"versions":["3.18-2","3.19.1-1","3.19.1-2","3.20-1","3.20-2","3.20-2.1"]},{"source":"osv","ecosystem":"Mageia:10","package":"iperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-1.mga10"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:10","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.17.1-6.el10_2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro Extras 6.2","package":"iperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"iperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"iperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"iperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-150000.3.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"iperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-150000.3.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.11-1","3.0.11-1ubuntu0.1~esm1","3.0.11-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.3-1","3.1.3-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6-2","3.7-1","3.7-2","3.7-3","3.7-3ubuntu0.1~esm1","3.7-3ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.9-1","3.9-1build1","3.9-1+deb11u1build0.22.04.1","3.9-1+deb11u1ubuntu0.1~esm1","3.9-1+deb11u1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.14-1","3.15-1","3.16-1","3.16-1build1","3.16-1build2","3.16-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.20-2","3.20-2.1","3.20-2.1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.18-2","3.19.1-2","3.20-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"iperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"iperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21-160000.1.1"}]}],"bundled":5}],"products":[{"vendor":"es","product":"iperf3"},{"vendor":"esnet","product":"iperf3"}],"references":[{"url":"https://github.com/esnet/iperf/releases/tag/3.22","tags":["vendor-advisory","patch","release-notes","fix","report"]},{"url":"https://github.com/esnet/iperf/blob/master/RELNOTES.md","tags":["release-notes","advisory","report"]},{"url":"https://www.vulncheck.com/advisories/iperf3-udp-receive-worker-infinite-loop-dos","tags":["third-party-advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102253","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-jhpr-vprv-wh8f"},{"url":"https://access.redhat.com/errata/RHSA-2026:88207","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102253","tags":["report"]},{"url":"https://bugzilla.redhat.com/2543638","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-88207.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-102253","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102253.json","tags":["advisory"]},{"url":"https://github.com/esnet/iperf","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-102253","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0539.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36548","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WVURYNW7KMOY3RQC6OJUZLHYUU5HP4Y3/","tags":["web"]},{"url":"https://errata.rockylinux.org/RLSA-2026:88207","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543638","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624178-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1283528","tags":["report"]},{"url":"https://bugzilla.suse.com/1283786","tags":["report"]},{"url":"https://bugzilla.suse.com/1283787","tags":["report"]},{"url":"https://bugzilla.suse.com/1284404","tags":["report"]},{"url":"https://bugzilla.suse.com/1284405","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-101276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-101283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-102253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-71217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-71218","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624234-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264678-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-102253","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102253","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-102253","title":"iperf3 \u003c 3.22 UDP Receive Worker Infinite Loop DoS","description":"iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.","status":"published","published":"2026-09-29T20:11:47.089Z","modified":"2026-11-08T14:00:43.205Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-835"],"updated_at":"2026-11-08T14:43:22.764053Z"}],"euvd":[{"id":"EUVD-2026-89415","description":"iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.","status":"published","published":"2026-09-29T20:11:47Z","modified":"2026-11-08T14:00:43Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-08T15:13:09.785497Z"}],"ghsa":[{"id":"GHSA-jhpr-vprv-wh8f","title":"iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows...","description":"iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.","status":"published","published":"2026-09-29T21:33:27Z","modified":"2026-09-29T21:33:36Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:12:34.453857Z"}],"nvd":[{"id":"CVE-2026-102253","description":"iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.","status":"published","published":"2026-09-29T21:17:13.64Z","modified":"2026-09-30T20:17:21.84Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:12:52.759595Z"}],"osv":[{"id":"BELL-CVE-2026-102253","status":"published","published":"2026-09-30T06:05:11.69098Z","modified":"2026-11-03T07:16:12.523920859Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:51:13.802617Z"},{"id":"CVE-2026-102253","title":"iperf3 \u003c 3.22 UDP Receive Worker Infinite Loop DoS","description":"iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.","status":"published","published":"2026-09-29T20:11:47.089Z","modified":"2026-11-09T02:31:02.031797638Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-09T03:16:44.651171Z"},{"id":"DEBIAN-CVE-2026-102253","description":"iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.","status":"published","published":"2026-09-29T21:17:13.64Z","modified":"2026-10-05T11:00:06.31897264Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:45:48.440897Z"},{"id":"RLSA-2026:88207","title":"Important: iperf3 security update","description":"Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.\n\nSecurity Fix(es):\n\n* iperf3: iperf3: Denial of Service via UDP receive worker infinite loop (CVE-2026-102253)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-23T12:11:02.998013Z","modified":"2026-10-23T12:45:02.525008332Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-102253","description":"iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.","status":"published","published":"2026-09-29T21:17:00Z","modified":"2026-10-17T12:59:46.069316147Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:55:58.519486Z"},{"id":"ALSA-2026:88207","title":"Important: iperf3 security update","description":"Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.  \n\nSecurity Fix(es):  \n\n  * iperf3: iperf3: Denial of Service via UDP receive worker infinite loop (CVE-2026-102253)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-22T00:00:00Z","modified":"2026-10-29T11:31:02.62697118Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"AZL-105051","title":"CVE-2026-102253 affecting package iperf3 for versions less than 3.17.1-7","description":"iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.","status":"published","published":"2026-09-29T21:17:13Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:17.719431Z"},{"id":"MGASA-2026-0539","title":"Updated iperf package fixes security vulnerabilities","description":"Iperf3 server accepts unbounded peer-controlled json parameters enabling\nremote denial of service via resource exhaustion. (CVE-2026-71217)\nUnbounded peer-controlled allocation in iperf3 json_read() allows\nunauthenticated remote memory exhaustion. (CVE-2026-71218)\nIperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap\nuse-after-free: the server's per-test watchdog server_timer_proc() frees\nstreams without cancelling/joining their worker threads, so a blocked\nworker dereferences a freed iperf_stream. (CVE-2026-101276)\nIperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in\ndecrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the\nattacker-controlled ciphertext length (guard warns only), so an\nunauthenticated client overflows the heap via an oversized authtoken.\n(CVE-2026-101283)\nIperf3 \u003c 3.22 UDP Receive Worker Infinite Loop DoS. (CVE-2026-102253)\n","status":"published","published":"2026-10-25T01:13:22Z","modified":"2026-10-25T01:28:09.754940198Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:12060-1","title":"iperf-3.22-1.1 on GA media","description":"These are all security issues fixed in the iperf-3.22-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-05T00:00:00Z","modified":"2026-10-06T17:23:10.884795572Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:22090-1","title":"Security update for iperf","description":"This update for iperf fixes the following issues:\n\n- CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via\n  resource exhaustion (bsc#1284405).\n- CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion\n  (bsc#1284404).\n- CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-\n  test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786).\n- CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a\n  256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787).\n- CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an\n  infinite loop (bsc#1283528).\n\nChanges for iperf:\n\n- Updated to version 3.22\n","status":"published","published":"2026-10-12T12:12:10Z","modified":"2026-10-19T17:23:13.585480674Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:24178-1","title":"Security update for iperf","description":"This update for iperf fixes the following issues:\n\n- CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via\n  resource exhaustion (bsc#1284405).\n- CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion\n  (bsc#1284404).\n- CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-\n  test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786).\n- CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a\n  256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787).\n- CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an\n  infinite loop (bsc#1283528).\n\nChanges for iperf:\n\n- Updated to version 3.22\n","status":"published","published":"2026-10-12T12:14:05Z","modified":"2026-10-20T17:23:58.074616255Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24234-1","title":"Security update for iperf","description":"This update for iperf fixes the following issues:\n\n- CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via\n  resource exhaustion (bsc#1284405).\n- CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion\n  (bsc#1284404).\n- CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-\n  test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786).\n- CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a\n  256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787).\n- CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an\n  infinite loop (bsc#1283528).\n\nChanges for iperf:\n\n- Updated to version 3.22\n","status":"published","published":"2026-10-12T12:09:00Z","modified":"2026-10-21T17:23:11.546296457Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4678-1","title":"Security update for iperf","description":"This update for iperf fixes the following issues:\n\n- CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via\n  resource exhaustion (bsc#1284405).\n- CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion\n  (bsc#1284404).\n- CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-\n  test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786).\n- CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a\n  256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787).\n- CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an\n  infinite loop (bsc#1283528).\n\nChanges for iperf:\n\n- Updated to version 3.22.\n","status":"published","published":"2026-10-15T07:27:34Z","modified":"2026-10-15T18:00:06.423872963Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}