CVE-2024-53580

EUVD-2024-51998
iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
Affected Products (NVD)
VendorProductVersion
esiperf3
3.17.1
netappontap_9
-
netapphci_compute_node
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
iperf3
bookworm
no-dsa
bookworm (security)
vulnerable
bullseye
vulnerable
bullseye (security)
3.9-1+deb11u3
fixed
forky
3.20-2
fixed
sid
3.20-2
fixed
trixie
3.18-2+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
iperf
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
oracular
ignored
plucky
needs-triage
questing
needs-triage
trusty
needs-triage
xenial
needs-triage
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
iperf3
RHEL 9
0:3.9-13.el9_5.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
iperf3
Amazon Linux 2
0:3.1.7-2.amzn2.0.5
fixed
Amazon Linux 2023
0:3.18-1.amzn2023
fixed
iperf3-debuginfo
Amazon Linux 2
0:3.1.7-2.amzn2.0.5
fixed
Amazon Linux 2023
0:3.18-1.amzn2023
fixed
iperf3-debugsource
Amazon Linux 2023
0:3.18-1.amzn2023
fixed
iperf3-devel
Amazon Linux 2
0:3.1.7-2.amzn2.0.5
fixed
Amazon Linux 2023
0:3.18-1.amzn2023
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
iperf3
Azure Linux 3.0
0:3.17.1-2.azl3
fixed
CBL-Mariner 2.0
0:3.18-1.cm2
fixed
Common Weakness Enumeration
References
https://gist.github.com/neolead/663badf2ebefefa6fe4303695e7aa7a3
https://github.com/esnet/iperf/releases/tag/3.18
https://lists.debian.org/debian-lts-announce/2025/01/msg00027.html
https://security.netapp.com/advisory/ntap-20250404-0009/
https://gist.github.com/neolead/663badf2ebefefa6fe4303695e7aa7a3