SUSE-SU-2026:4678-1
Vulnerability from csaf_suse - Published: 2026-10-15 07:27 - Updated: 2026-10-16 09:50Summary
Security update for iperf
Severity
Important
Notes
Title of the patch: Security update for iperf
Description of the patch: This update for iperf fixes the following issues:
- CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via
resource exhaustion (bsc#1284405).
- CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion
(bsc#1284404).
- CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-
test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786).
- CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a
256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787).
- CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an
infinite loop (bsc#1283528).
Changes for iperf:
- Updated to version 3.22.
Patchnames: SUSE-2026-4678,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4678,SUSE-Storage-7.1-2026-4678
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.1 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-101276
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-101276
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-101276
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-101276
Threats
Impact
moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for iperf",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for iperf fixes the following issues:\n\n- CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via\n resource exhaustion (bsc#1284405).\n- CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion\n (bsc#1284404).\n- CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server\u0027s per-\n test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786).\n- CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a\n 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787).\n- CVE-2026-102253: missing checks in the server\u0027s UDP receive worker allows unauthenticated remote attackers to cause an\n infinite loop (bsc#1283528).\n\nChanges for iperf:\n\n- Updated to version 3.22.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-4678,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4678,SUSE-Storage-7.1-2026-4678",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4678-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:4678-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264678-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:4678-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264678-1/"
},
{
"category": "self",
"summary": "SUSE Bug 1283528",
"url": "https://bugzilla.suse.com/1283528"
},
{
"category": "self",
"summary": "SUSE Bug 1283786",
"url": "https://bugzilla.suse.com/1283786"
},
{
"category": "self",
"summary": "SUSE Bug 1283787",
"url": "https://bugzilla.suse.com/1283787"
},
{
"category": "self",
"summary": "SUSE Bug 1284404",
"url": "https://bugzilla.suse.com/1284404"
},
{
"category": "self",
"summary": "SUSE Bug 1284405",
"url": "https://bugzilla.suse.com/1284405"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-101276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-101276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-101283 page",
"url": "https://www.suse.com/security/cve/CVE-2026-101283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-102253 page",
"url": "https://www.suse.com/security/cve/CVE-2026-102253/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-71217 page",
"url": "https://www.suse.com/security/cve/CVE-2026-71217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-71218 page",
"url": "https://www.suse.com/security/cve/CVE-2026-71218/"
}
],
"title": "Security update for iperf",
"tracking": {
"current_release_date": "2026-10-16T09:50:05Z",
"generator": {
"date": "2026-10-15T07:27:34Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:4678-1",
"initial_release_date": "2026-10-15T07:27:34Z",
"revision_history": [
{
"date": "2026-10-15T07:27:34Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-16T09:50:05Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "iperf-0:3.22-150000.3.18.1.aarch64",
"product": {
"name": "iperf-0:3.22-150000.3.18.1.aarch64",
"product_id": "iperf-0:3.22-150000.3.18.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/iperf@3.22-150000.3.18.1?arch=aarch64\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "iperf-devel-0:3.22-150000.3.18.1.aarch64",
"product": {
"name": "iperf-devel-0:3.22-150000.3.18.1.aarch64",
"product_id": "iperf-devel-0:3.22-150000.3.18.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/iperf-devel@3.22-150000.3.18.1?arch=aarch64\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libiperf0-0:3.22-150000.3.18.1.aarch64",
"product": {
"name": "libiperf0-0:3.22-150000.3.18.1.aarch64",
"product_id": "libiperf0-0:3.22-150000.3.18.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libiperf0@3.22-150000.3.18.1?arch=aarch64\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "iperf-0:3.22-150000.3.18.1.i586",
"product": {
"name": "iperf-0:3.22-150000.3.18.1.i586",
"product_id": "iperf-0:3.22-150000.3.18.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/iperf@3.22-150000.3.18.1?arch=i586\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "iperf-devel-0:3.22-150000.3.18.1.i586",
"product": {
"name": "iperf-devel-0:3.22-150000.3.18.1.i586",
"product_id": "iperf-devel-0:3.22-150000.3.18.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/iperf-devel@3.22-150000.3.18.1?arch=i586\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libiperf0-0:3.22-150000.3.18.1.i586",
"product": {
"name": "libiperf0-0:3.22-150000.3.18.1.i586",
"product_id": "libiperf0-0:3.22-150000.3.18.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libiperf0@3.22-150000.3.18.1?arch=i586\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "iperf-0:3.22-150000.3.18.1.ppc64le",
"product": {
"name": "iperf-0:3.22-150000.3.18.1.ppc64le",
"product_id": "iperf-0:3.22-150000.3.18.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/iperf@3.22-150000.3.18.1?arch=ppc64le\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"product": {
"name": "iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"product_id": "iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/iperf-devel@3.22-150000.3.18.1?arch=ppc64le\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libiperf0-0:3.22-150000.3.18.1.ppc64le",
"product": {
"name": "libiperf0-0:3.22-150000.3.18.1.ppc64le",
"product_id": "libiperf0-0:3.22-150000.3.18.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libiperf0@3.22-150000.3.18.1?arch=ppc64le\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "iperf-0:3.22-150000.3.18.1.s390x",
"product": {
"name": "iperf-0:3.22-150000.3.18.1.s390x",
"product_id": "iperf-0:3.22-150000.3.18.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/iperf@3.22-150000.3.18.1?arch=s390x\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "iperf-devel-0:3.22-150000.3.18.1.s390x",
"product": {
"name": "iperf-devel-0:3.22-150000.3.18.1.s390x",
"product_id": "iperf-devel-0:3.22-150000.3.18.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/iperf-devel@3.22-150000.3.18.1?arch=s390x\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libiperf0-0:3.22-150000.3.18.1.s390x",
"product": {
"name": "libiperf0-0:3.22-150000.3.18.1.s390x",
"product_id": "libiperf0-0:3.22-150000.3.18.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libiperf0@3.22-150000.3.18.1?arch=s390x\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "iperf-0:3.22-150000.3.18.1.x86_64",
"product": {
"name": "iperf-0:3.22-150000.3.18.1.x86_64",
"product_id": "iperf-0:3.22-150000.3.18.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/iperf@3.22-150000.3.18.1?arch=x86_64\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "iperf-devel-0:3.22-150000.3.18.1.x86_64",
"product": {
"name": "iperf-devel-0:3.22-150000.3.18.1.x86_64",
"product_id": "iperf-devel-0:3.22-150000.3.18.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/iperf-devel@3.22-150000.3.18.1?arch=x86_64\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libiperf0-0:3.22-150000.3.18.1.x86_64",
"product": {
"name": "libiperf0-0:3.22-150000.3.18.1.x86_64",
"product_id": "libiperf0-0:3.22-150000.3.18.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:iperf_project:iperf:3.22:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libiperf0@3.22-150000.3.18.1?arch=x86_64\u0026upstream=iperf-0:3.22-150000.3.18.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7.1",
"product": {
"name": "SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "iperf-0:3.22-150000.3.18.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64"
},
"product_reference": "iperf-0:3.22-150000.3.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "iperf-0:3.22-150000.3.18.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le"
},
"product_reference": "iperf-0:3.22-150000.3.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "iperf-0:3.22-150000.3.18.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x"
},
"product_reference": "iperf-0:3.22-150000.3.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "iperf-0:3.22-150000.3.18.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64"
},
"product_reference": "iperf-0:3.22-150000.3.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "iperf-devel-0:3.22-150000.3.18.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64"
},
"product_reference": "iperf-devel-0:3.22-150000.3.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "iperf-devel-0:3.22-150000.3.18.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le"
},
"product_reference": "iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "iperf-devel-0:3.22-150000.3.18.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x"
},
"product_reference": "iperf-devel-0:3.22-150000.3.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "iperf-devel-0:3.22-150000.3.18.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64"
},
"product_reference": "iperf-devel-0:3.22-150000.3.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libiperf0-0:3.22-150000.3.18.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64"
},
"product_reference": "libiperf0-0:3.22-150000.3.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libiperf0-0:3.22-150000.3.18.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le"
},
"product_reference": "libiperf0-0:3.22-150000.3.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libiperf0-0:3.22-150000.3.18.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x"
},
"product_reference": "libiperf0-0:3.22-150000.3.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libiperf0-0:3.22-150000.3.18.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
},
"product_reference": "libiperf0-0:3.22-150000.3.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "iperf-0:3.22-150000.3.18.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64"
},
"product_reference": "iperf-0:3.22-150000.3.18.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "iperf-0:3.22-150000.3.18.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64"
},
"product_reference": "iperf-0:3.22-150000.3.18.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libiperf0-0:3.22-150000.3.18.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64"
},
"product_reference": "libiperf0-0:3.22-150000.3.18.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libiperf0-0:3.22-150000.3.18.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64"
},
"product_reference": "libiperf0-0:3.22-150000.3.18.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-101276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-101276"
}
],
"notes": [
{
"category": "general",
"text": "iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server\u0027s per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-101276",
"url": "https://www.suse.com/security/cve/CVE-2026-101276"
},
{
"category": "external",
"summary": "SUSE Bug 1283786 for CVE-2026-101276",
"url": "https://bugzilla.suse.com/1283786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-15T07:27:34Z",
"details": "important"
}
],
"title": "CVE-2026-101276"
},
{
"cve": "CVE-2026-101283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-101283"
}
],
"notes": [
{
"category": "general",
"text": "iperf3 3.20-3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-101283",
"url": "https://www.suse.com/security/cve/CVE-2026-101283"
},
{
"category": "external",
"summary": "SUSE Bug 1283787 for CVE-2026-101283",
"url": "https://bugzilla.suse.com/1283787"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-15T07:27:34Z",
"details": "important"
}
],
"title": "CVE-2026-101283"
},
{
"cve": "CVE-2026-102253",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-102253"
}
],
"notes": [
{
"category": "general",
"text": "iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server\u0027s UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-102253",
"url": "https://www.suse.com/security/cve/CVE-2026-102253"
},
{
"category": "external",
"summary": "SUSE Bug 1283528 for CVE-2026-102253",
"url": "https://bugzilla.suse.com/1283528"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-15T07:27:34Z",
"details": "important"
}
],
"title": "CVE-2026-102253"
},
{
"cve": "CVE-2026-71217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-71217"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-71217",
"url": "https://www.suse.com/security/cve/CVE-2026-71217"
},
{
"category": "external",
"summary": "SUSE Bug 1284405 for CVE-2026-71217",
"url": "https://bugzilla.suse.com/1284405"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-15T07:27:34Z",
"details": "important"
}
],
"title": "CVE-2026-71217"
},
{
"cve": "CVE-2026-71218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-71218"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of Service (DoS) through memory exhaustion, severe slowdown, or termination of the iperf3 service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-71218",
"url": "https://www.suse.com/security/cve/CVE-2026-71218"
},
{
"category": "external",
"summary": "SUSE Bug 1284404 for CVE-2026-71218",
"url": "https://bugzilla.suse.com/1284404"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Enterprise Storage 7.1:libiperf0-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-0:3.22-150000.3.18.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-0:3.22-150000.3.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-15T07:27:34Z",
"details": "moderate"
}
],
"title": "CVE-2026-71218"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.