7.5
CVSSv3

CVE-2023-38403

Published: 17/07/2023 Updated: 09/01/2024
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

iperf3 prior to 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

es iperf3

debian debian linux 10.0

fedoraproject fedora 37

fedoraproject fedora 38

netapp ontap select deploy administration utility -

netapp clustered data ontap 9.0

apple macos 14.0

apple macos

Vendor Advisories

Synopsis Important: iperf3 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for iperf3 is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a se ...
Synopsis Important: iperf3 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for iperf3 is now available for Red Hat Enterprise Linux 82 Advanced Update Support, Red Hat Enterprise Linux 82 Telec ...
Synopsis Important: iperf3 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for iperf3 is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsRed Hat Product Security ...
Synopsis Important: iperf3 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for iperf3 is now available for Red Hat Enterprise Linux 86 Extended Update SupportRed Hat Product Security has rated ...
Synopsis Important: iperf3 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for iperf3 is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a se ...
Synopsis Important: iperf3 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for iperf3 is now available for Red Hat Enterprise Linux 90 Extended Update SupportRed Hat Product Security has rated ...
Synopsis Important: iperf3 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for iperf3 is now available for Red Hat Enterprise Linux 84 Advanced Mission Critical Update Support, Red Hat Enterpris ...
Synopsis Important: iperf3 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for iperf3 is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a se ...
iperf3 before 314 allows peers to cause an integer overflow and heap corruption via a crafted length field (CVE-2023-38403) ...
Description<!---->An integer overflow flaw was found in the way iperf3 dynamically allocates memory buffers for JSON-formatted messages A remote attacker could send a specially crafted sequence of bytes on the iperf3 control channel with a specified JSON message length of 0xffffffff to trigger an integer overflow leading the receiving process to a ...
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the&nbsp;Apple security releases page Apple security documents reference vulnerabilities by&nbsp;CVE-ID&nbsp;whe ...
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the&nbsp;Apple security releases page Apple security documents reference vulnerabilities by&nbsp;CVE-ID&nbsp;whe ...