PT-2025-31760 · Iperf+6 · Iperf+6

Han Lee · Publicado 2025-08-02 · Atualizado 2026-01-29 · CVE-2025-54349

Positive Technologies (AI Summary) · Pt

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas Versões do iperf anteriores à 3.19.1

Descrição O software iperf contém uma vulnerabilidade de estouro de buffer no heap no arquivo iperf auth.c. Isso se deve a um erro off-by-one.

Recomendações Atualize para a versão 3.19.1 ou posterior do iperf.

Correção

Enumeração de Fraquezas

CWE-193

Identificadores relacionados

ALSA-2026:1592

ALSA-2026:1595

ALSA-2026:1597

ALT-PU-2025-10329

ALT-PU-2025-10407

ALT-PU-2025-10534

AZL-66060

AZL-66065

BDU:2025-12588

CVE-2025-54349

DLA-4281-1

MGASA-2026-0021

OESA-2025-1973

OPENSUSE-SU-2025:15414-1

RHSA-2026:1592

RHSA-2026:1595

RHSA-2026:1597

RHSA-2026:1760

RHSA-2026:1773

RHSA-2026:1881

RHSA-2026:1882

RHSA-2026:1967

RHSA-2026:2328

RHSA-2026:2329

RHSA-2026:2448

RHSA-2026:2449

SUSE-SU-2025:02749-1

USN-7970-1

Produtos afetados

Alt Linux

Debian

Linuxmint

Red Os

Rocky Linux

Ubuntu

Iperf

Referências · 63

• https://github.com/esnet/iperf/commit/4e5313bab0b9b3fe03513ab54f722c8a3e4b7bdf · Correção
• https://github.com/esnet/iperf/releases/tag/3.19.1 · Nota
• https://cve.org/CVERecord?id=CVE-2025-54349 · Nota de Segurança
• https://reddit.com/r/debian/comments/1n79g7f/debian_131_and_1212_20250906 · Publicação no Reddit
• https://errata.almalinux.org/10/ALSA-2026-1597.html · Aviso do Fabricante
• https://errata.almalinux.org/8/ALSA-2026-1592.html · Aviso do Fabricante
• https://osv.dev/vulnerability/ALSA-2026:1597 · Aviso do Fabricante
• https://osv.dev/vulnerability/DLA-4281-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/BELL-CVE-2025-54349 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-54350 · Nota
• https://errata.almalinux.org/9/ALSA-2026-1595.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-54349 · Nota
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/3.1 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-54349 · Aviso do Fabricante
• https://errata.rockylinux.org/RLSA-2026:1592 · Aviso do Fabricante