Volerion logoVolerion
Volerion logoVolerion

ESnet iperf Off-by-One Heap-Based Buffer Overflow Vulnerability in Authentication

Vulnerability

A heap-based buffer overflow vulnerability has been identified in ESnet iperf versions prior to 3.19.1. The issue arises from an off-by-one error in the authentication component, specifically in the file iperf_auth.c.

Impact

Exploitation of this vulnerability leads to a heap-based buffer overflow, which can potentially be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Users can upgrade to iperf version 3.19.1 or later to address this vulnerability.

Added: Aug 3, 2025, 2:20 AM
Updated: Aug 3, 2025, 2:20 AM

Vulnerability Rating

Custom Algorithm
spread
5.7
impact
10.0
exploitability
7.7
remediation
7.7
relevance
0.3
threat
3.2
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.