PT-2025-31762 · Iperf+3 · Iperf+3

Han Lee · Published 2025-08-02 · Updated 2025-10-17 · CVE-2025-54351

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iperf versions prior to 3.19.1

Description The software contains a buffer overflow in net.c when the --skip-rx-copy option is used in conjunction with MSG TRUNC during the recv operation.

Recommendations Update to iperf version 3.19.1 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-420

CWE-119

Related Identifiers

ALT-PU-2025-10329

ALT-PU-2025-10407

ALT-PU-2025-10534

BDU:2025-10812

CVE-2025-54351

OPENSUSE-SU-2025:15414-1

SUSE-SU-2025:02749-1

Affected Products

Alt Linux

Debian

Red Os

Iperf

References · 29

• https://github.com/esnet/iperf/commit/969b7f70c447513e92c9798f22e82b40ebc53bf0 · Patch
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-54351 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54351 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10812 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2025-54351 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-54351 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-54351 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02749-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15414-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54351 · Security Note
• https://ubuntu.com/security/CVE-2025-54351 · Vendor Advisory
• https://github.com/esnet/iperf/releases/tag/3.19.1 · Note
• https://t.me/cveNotify/130693 · Telegram Post
• https://bugzilla.suse.com/1247520 · Note