https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:10:16.066445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:1592 ALSA-2026:1592 — Moderate: iperf3 security update 2026-10-04T02:10:16.453658+00:00

Affected: AlmaLinux:8: iperf3

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

Security Fix(es):

* iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-12588 bdu:2025-12588 2026-10-04T02:10:16.453750+00:00 bdu:2025-12588 https://cve.radiocsirt.org/vuln/bell-cve-2025-54349 BELL-CVE-2025-54349 2026-10-04T02:10:16.453777+00:00

Affected: Alpaquita:23: iperf3, Alpaquita:25: iperf3, Alpaquita:stream: iperf3

 https://cve.radiocsirt.org/vuln/euvd-2026-257551 EUVD-2026-257551 2026-10-04T02:10:16.453812+00:00 EUVD-2026-257551 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54349 fkie_cve-2025-54349 2026-10-04T02:10:16.453831+00:00

In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/ghsa-8xx8-qrh3-q8mq GHSA-8xx8-qrh3-q8mq 2026-10-04T02:10:16.453862+00:00

In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-54349 msrc_CVE-2025-54349 — In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow. 2026-10-04T02:10:16.453884+00:00 msrc_CVE-2025-54349 https://cve.radiocsirt.org/vuln/oesa-2025-1973 OESA-2025-1973 — iperf3 security update 2026-10-04T02:10:16.453910+00:00

Affected: openEuler:24.03-LTS-SP2: iperf3, openEuler:20.03-LTS-SP4: iperf3, openEuler:22.03-LTS-SP3: iperf3, openEuler:22.03-LTS-SP4: iperf3, openEuler:24.03-LTS: iperf3, openEuler:24.03-LTS-SP1: iperf3

Iperf is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, protocols, and buffers. Security Fix(es):

iperf is an open source tool for ESnet to actively measure the maximum bandwidth that can be achieved on an IP network. There was a security vulnerability in iperf 3.19.1 version before iperf 3.19.1. This vulnerability originated from an error in iperf_auth.c, which may cause heap buffer overflow.(CVE-2025-54349)

iperf is an open source tool for ESnet to actively measure the maximum bandwidth that can be achieved on an IP network. There was a security vulnerability in iperf 3.19.1 versions before iperf 3.19.1. This vulnerability originated from the failure of Base64 decoding assertion in iperf_auth.c, which may cause the application to exit.(CVE-2025-54350)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15414-1 openSUSE-SU-2025:15414-1 — iperf-3.19.1-1.1 on GA media 2026-10-04T02:10:16.453961+00:00

iperf-3.19.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:1773 RHSA-2026:1773 — Red Hat Security Advisory: iperf3 security update 2026-10-04T02:10:16.453989+00:00

iperf3: iperf Heap Buffer Overflow

 https://cve.radiocsirt.org/vuln/suse-su-2025:02749-1 SUSE-SU-2025:02749-1 — Security update for iperf 2026-10-04T02:10:16.454013+00:00

Security update for iperf

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-54349 UBUNTU-CVE-2025-54349 2026-10-04T02:10:16.454037+00:00

Affected: Ubuntu:Pro:20.04:LTS: iperf3, Ubuntu:22.04:LTS: iperf3, Ubuntu:Pro:24.04:LTS: iperf3, Ubuntu:25.10: iperf3

In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0258 WID-SEC-W-2026-0258 — Red Hat Enterprise Linux (iperf3): Schwachstelle ermöglicht Codeausführung 2026-10-04T02:10:16.454071+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder möglicherweise beliebigen Code auszuführen.