ALT-PU-2025-10573-1
Package iperf3 updated to version 3.19.1-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
Published: 2025-08-03
Modified: 2025-08-05
Modified: 2025-08-05
CVE-2025-54349
In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.
Severity: CRITICAL (10.0)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References:
Published: 2025-08-03
Modified: 2025-08-05
Modified: 2025-08-05
CVE-2025-54350
In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt.
Severity: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References:
Published: 2025-08-03
Modified: 2025-08-05
Modified: 2025-08-05
CVE-2025-54351
In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).
Severity: CRITICAL (10.0)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References: