CVE-2023-7250
Iperf3: possible denial of service
- State
- Published
- Severity
- 5.3 Medium
- Published
- Mar 18, 2024
- Updated
- Nov 6, 2025
- Reserved
- Mar 15, 2024
Description
A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | redhat |
Weaknesses
- CWE-183 Permissive List of Allowed Inputs
Affected Products
| Product | Versions |
|---|---|
Red Hat Enterprise Linux 8Red Hat |
|
Red Hat Enterprise Linux 9Red Hat |
|
Red Hat Enterprise Linux 7Red Hat |
References
- RHSA-2024:4241vendor-advisory
- RHSA-2024:9185vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-7250vdb-entry
- RHBZ#2244707issue-tracking
- https://lists.debian.org/debian-lts-announce/2025/01/msg00027.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.