CVE-2025-54349 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.5 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
mitre	CNA	6.5 MEDIUM				CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 21%

Vendor	Product	Version
iperf_project	iperf	𝑥 < 3.19.1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

iperf3

bullseye	vulnerable
bullseye (security)	3.9-1+deb11u3 fixed
bookworm	3.12-1+deb12u2 fixed
bookworm (security)	vulnerable
trixie	3.18-2+deb13u1 fixed
forky	3.19.1-1 fixed
sid	3.19.1-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

iperf3

plucky	needs-triage
noble	needs-triage
jammy	needs-triage
focal	needs-triage
bionic	needs-triage
xenial	needs-triage

Common Weakness Enumeration

CWE-193 - Off-by-one Error
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

References

https://github.com/esnet/iperf/commit/4e5313bab0b9b3fe03513ab54f722c8a3e4b7bdf

https://github.com/esnet/iperf/releases/tag/3.19.1