CVE-2023-7250

MEDIUM EPSS 56.2%

Published Mar 18, 20242y ago · Modified Jun 17, 20261w ago

5.3 CVSS 3.1

Medium

Published Mar 18, 2024 2y ago

Last Modified Jun 17, 2026 1w ago

Description

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.

CVSS Details

Base Score

5.3

Exploitability

3.9

Impact

1.4

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability Low

Threat Intelligence

EPSS Exploit Probability

56.2% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-183

Affected Products 8

Vendor	Product	Version	Range
es	iperf3	*	<3.15
redhat	enterprise_linux	8.0	any
redhat	enterprise_linux	9.0	any
redhat	enterprise_linux_for_arm_64	8.0_aarch64	any
redhat	enterprise_linux_for_arm_64	9.0_aarch64	any
redhat	enterprise_linux_for_ibm_z_systems	8.0_s390x	any
redhat	enterprise_linux_for_ibm_z_systems	9.0_s390x	any
redhat	enterprise_linux_for_power_little_endian	8.0_ppc64le	any

References 5

access.redhat.com https://access.redhat.com/errata/RHSA-2024:4241

Third Party Advisory
access.redhat.com https://access.redhat.com/errata/RHSA-2024:9185

Third Party Advisory
access.redhat.com https://access.redhat.com/security/cve/CVE-2023-7250

Third Party Advisory
bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2244707

Issue TrackingThird Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00027.html

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.