PT-2025-31760 · Iperf+6 · Iperf+6

Han Lee · Published 2025-08-02 · Updated 2026-01-29 · CVE-2025-54349

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iperf versions prior to 3.19.1

Description The iperf software contains a heap-based buffer overflow issue in the iperf auth.c file. This is due to an off-by-one error.

Recommendations Update to iperf version 3.19.1 or later.

Fix

Weakness Enumeration

CWE-193

Related Identifiers

ALSA-2026:1592

ALSA-2026:1595

ALSA-2026:1597

ALT-PU-2025-10329

ALT-PU-2025-10407

ALT-PU-2025-10534

AZL-66060

AZL-66065

BDU:2025-12588

CVE-2025-54349

DLA-4281-1

MGASA-2026-0021

OESA-2025-1973

OPENSUSE-SU-2025:15414-1

RHSA-2026:1592

RHSA-2026:1595

RHSA-2026:1597

RHSA-2026:1760

RHSA-2026:1773

RHSA-2026:1881

RHSA-2026:1882

RHSA-2026:1967

RHSA-2026:2328

RHSA-2026:2329

RHSA-2026:2448

RHSA-2026:2449

SUSE-SU-2025:02749-1

USN-7970-1

Affected Products

Alt Linux

Debian

Linuxmint

Red Os

Rocky Linux

Ubuntu

Iperf

References · 63

• https://github.com/esnet/iperf/commit/4e5313bab0b9b3fe03513ab54f722c8a3e4b7bdf · Patch
• https://cve.org/CVERecord?id=CVE-2025-54349 · Security Note
• https://errata.almalinux.org/10/ALSA-2026-1597.html · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-1592.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:1597 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4281-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-54349 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-1595.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-54349 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:1592 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-54349 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54349 · Security Note
• https://osv.dev/vulnerability/AZL-66060 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02749-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12588 · Security Note