CVE-2023-7250 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-7250 Interim 1 6 2025-02-16T02:25:11Z current 2024-03-19T00:16:18Z 2025-02-16T02:25:11Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-7250 A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-November/000593.html E-Mail link for RHSA-2024:9185 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 8 SUSE Liberty Linux 9 iperf3-3.5-10.el8_10 iperf3-3.9-13.el9 iperf3-3.5-10.el8_10 as a component of SUSE Liberty Linux 8 iperf3-3.9-13.el9 as a component of SUSE Liberty Linux 9 A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service. CVE-2023-7250 SUSE Liberty Linux 8:iperf3-3.5-10.el8_10 SUSE Liberty Linux 9:iperf3-3.9-13.el9 low 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L