Off-by-one in iperf - CVE-2025-54349

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU113835

Off-by-one in iperf - CVE-2025-54349

Published: August 12, 2025


Vulnerability identifier: #VU113835
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-54349
CWE-ID: CWE-193
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an off-by-one error in iperf_auth.c. A remote attacker can trigger an off-by-one error and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

iperf
Netezza Appliance
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Package Hub 15
openSUSE Leap
openEuler
Ubuntu
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
iperf3 (Red Hat package)
iperf3 (Ubuntu package)
iperf3
iperf3-debuginfo
iperf3-debugsource
iperf3-devel
iperf3-help
iperf3-doc
iperf-debugsource
libiperf0
iperf-debuginfo
iperf-devel
libiperf0-debuginfo
iperf

How to mitigate CVE-2025-54349

Install updates from vendor's website.

iperf - update to 3.19.1
Netezza Appliance - update to 1.0.1.0 fp278500
iperf3 (Red Hat package) - addressed in versions 3.5-4.el8_2.2, 3.5-7.el8_4.2, 3.5-7.el8_6.2, 3.5-7.el8_8.2, 3.5-12.el8_10, 3.9-10.el9_0.2, 3.9-10.el9_2.2, 3.9-11.el9_4.2, 3.9-14.el9_6.1, 3.9-14.el9_7.1, 3.17.1-4.el10_0.1, 3.17.1-5.el10_1
iperf3 (Ubuntu package) - addressed in versions 3.7-3ubuntu0.1~esm2, 3.9-1+deb11u1ubuntu0.1, 3.16-1ubuntu0.1~esm1, 3.18-2ubuntu0.1
iperf3 - addressed in versions 3.9-14, 3.19.1-1
iperf3-debuginfo - update to 3.18-2
iperf3 - update to 3.18-2
iperf3-debugsource - update to 3.18-2
iperf3-devel - update to 3.18-2
iperf3-help - update to 3.18-2
iperf3-doc - update to 3.19.1-1
iperf3-devel - update to 3.19.1-1
iperf-debugsource - update to 3.19.1-150000.3.15.1
libiperf0 - update to 3.19.1-150000.3.15.1
iperf-debuginfo - update to 3.19.1-150000.3.15.1
iperf-devel - update to 3.19.1-150000.3.15.1
libiperf0-debuginfo - update to 3.19.1-150000.3.15.1
iperf - update to 3.19.1-150000.3.15.1

External References

Related Security Bulletins