Log in Start free

Vulnerability · Published Jul 17, 2023 · Assigned by mitre

CVE-2023-38403

High 7.5

In plain English

A high-severity security flaw in the iperf3 package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 80% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)2.0%top 19.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8iperf33.5-7.el8_8.almaALSA-2023:4570
AlmaLinux:9iperf33.9-10.el9_2.almaALSA-2023:4571
Debian:12iperf33.12-1+deb12u1DEBIAN-CVE-2023-38403
Debian:12iperf33.12-1+deb12u1DSA-5455-1
Debian:13iperf33.14-1DEBIAN-CVE-2023-38403
Debian:14iperf33.14-1DEBIAN-CVE-2023-38403
Rocky Linux:8iperf30:3.5-7.el8_8RLSA-2023:4570
Rocky Linux:9iperf30:3.9-10.el9_2RLSA-2023:4571
Ubuntu:22.04:LTSiperf33.9-1+deb11u1build0.22.04.1USN-6431-2
Ubuntu:22.04:LTSiperf33.9-1+deb11u1build0.22.04.1UBUNTU-CVE-2023-38403
Ubuntu:25.10iperf3no fix listedUBUNTU-CVE-2023-38403
Ubuntu:26.10iperf3no fix listedUBUNTU-CVE-2023-38403

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References