CVE-2023-7250

Katalog CVE

CVSS 5.3 · Medium EPSS 0,93%

Kerentanan Permissive List of Allowed Inputs pada es iperf3, redhat enterprise linux +3 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.

Rincian

Terbit di NVD

18 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber redhat.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-183: Permissive List of Allowed Inputs

EPSS (30 hari)

0,93% peluang dieksploitasi; lebih tinggi dari 59,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2024:4241 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:9185 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-7250 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2244707 issue tracking · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/01/msg00027.html