Количество 10
Количество 10
CVE-2026-102253
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.
CVE-2026-102253
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.
CVE-2026-102253
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.
CVE-2026-102253
iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS
CVE-2026-102253
iperf3 versions prior to 3.22 contains a denial of service vulnerabili ...
RLSA-2026:88207
Important: iperf3 security update
GHSA-jhpr-vprv-wh8f
iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.
ELSA-2026-88207
ELSA-2026-88207: iperf3 security update (IMPORTANT)
openSUSE-SU-2026:22090-1
Security update for iperf
SUSE-SU-2026:4678-1
Security update for iperf
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-102253 iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure. | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
 | CVE-2026-102253 iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure. | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
 | CVE-2026-102253 iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure. | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
 | CVE-2026-102253 iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS | CVSS3: 7.5 | 0% Низкий | 26 дней назад |
| CVE-2026-102253 iperf3 versions prior to 3.22 contains a denial of service vulnerabili ... | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
 | RLSA-2026:88207 Important: iperf3 security update | 0% Низкий | 3 дня назад | |
| GHSA-jhpr-vprv-wh8f iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure. | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
| ELSA-2026-88207 ELSA-2026-88207: iperf3 security update (IMPORTANT) | 0% Низкий | 5 дней назад | |
 | openSUSE-SU-2026:22090-1 Security update for iperf | 14 дней назад | ||
| SUSE-SU-2026:4678-1 Security update for iperf | 12 дней назад |
Уязвимостей на страницу