{"id":"USN-6431-3","aliases":[],"status":"published","title":"iperf3 vulnerability","description":"USN-6431-1 fixed a vulnerability in iperf3. This update provides\nthe corresponding update for Ubuntu 22.04 LTS.\n\nOriginal advisory details:\n \n Jorge Sancho Larraz discovered that iperf3 did not properly manage certain\n inputs, which could cause the server process to stop responding, waiting \n for input on the control connection. A remote attacker could possibly use\n this issue to cause a denial of service. (LP: #2038654)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-10-16T15:52:56Z","modified":"2026-04-22T10:40:34Z","fixes":[{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"iperf3","fixed_in":["3.9-1+deb11u1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"iperf3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9-1+deb11u1ubuntu0.1~esm1"}]}],"versions":["3.9-1","3.9-1build1","3.9-1+deb11u1build0.22.04.1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-6431-3","tags":["advisory"]},{"url":"https://launchpad.net/bugs/2038654","tags":["report"]}],"sources":{"osv":[{"id":"USN-6431-3","title":"iperf3 vulnerability","description":"USN-6431-1 fixed a vulnerability in iperf3. This update provides\nthe corresponding update for Ubuntu 22.04 LTS.\n\nOriginal advisory details:\n \n Jorge Sancho Larraz discovered that iperf3 did not properly manage certain\n inputs, which could cause the server process to stop responding, waiting \n for input on the control connection. A remote attacker could possibly use\n this issue to cause a denial of service. (LP: #2038654)\n","status":"published","published":"2023-10-16T15:52:56Z","modified":"2026-04-22T10:40:34.120204Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}
