CVE-2025-54349

Summary

In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

Affected Software

Weaknesses

• CWE-193: CWE-193 Off-by-one Error

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://lists.debian.org/debian-lts-announce/2025/08/msg00020.html

References

• https://github.com/esnet/iperf/commit/4e5313bab0b9b3fe03513ab54f722c8a3e4b7bdf
• https://github.com/esnet/iperf/releases/tag/3.19.1

• ←Previous
• Next→