The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-9534:01 advisory.

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0168 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0403 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0402 advisory.

    [3.1.7-3.0.1]
    - Fixes Improper JSON Handling CVE-2024-53580 [Orabug: 37495333]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0291-1 advisory.

    - Update to version 3.18
    - CVE-2024-53580: Fixed a segmentation violation via the iperf_exchange_parameters() function.
    (bsc#1234705)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0099 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2024-53580:
    iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters()     function.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7970-1 advisory.

    Jorge Sancho Larraz discovered that iperf3 did not properly manage certain inputs, which could cause the     server process to stop responding, waiting for input on the control connection. A remote attacker could     possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 22.04 LTS.
    (CVE-2023-7250)

    It was discovered that iperf3 had a timing side-channel when performing RSA decryption. An attacker could     possibly use this issue to recover sensitive information. This issue was only addressed in Ubuntu 20.04     LTS and Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-26306)

    It was discovered that iperf3 incorrectly handled certain inputs. An attacker could possibly use this     issue to cause a denial of service. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS     and Ubuntu 24.04 LTS. (CVE-2024-53580)

    Han Lee discovered that iperf3 had an off-by-one heap overflow. An attacker could possibly use this issue     to crash the program or execute arbitrary code. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu     22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-54349)

    Han Lee discovered that iperf3 did not properly manage certain inputs. An attacker could possibly use this     issue to cause a denial of service. (CVE-2025-54350)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the iperf package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters()     function. (CVE-2024-53580)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
282939	MiracleLinux 8 : iperf3-3.5-11.el8_10 (AXSA:2025-9534:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	high
213647	RHEL 8 : iperf3 (RHSA-2025:0168)	Nessus	Red Hat Local Security Checks	2025/1/9	2025/9/30	high
214433	RHEL 8 : iperf3 (RHSA-2025:0403)	Nessus	Red Hat Local Security Checks	2025/1/21	2025/9/30	high
214714	Oracle Linux 7 : iperf3 (ELSA-2025-0402)	Nessus	Oracle Linux Local Security Checks	2025/1/28	2025/9/30	high
214883	SUSE SLES15 / openSUSE 15 Security Update : iperf (SUSE-SU-2025:0291-1)	Nessus	SuSE Local Security Checks	2025/2/3	2025/9/30	high
238648	TencentOS Server 2: iperf3 (TSSA-2025:0099)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
294897	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : iperf3 vulnerabilities (USN-7970-1)	Nessus	Ubuntu Local Security Checks	2026/1/21	2026/1/21	critical
236994	Photon OS 4.0: Iperf PHSA-2025-4.0-0803	Nessus	PhotonOS Local Security Checks	2025/5/21	2025/5/21	medium
231534	Linux Distros Unpatched Vulnerability : CVE-2024-53580	Nessus	Misc.	2025/3/6	2026/4/29	high

检测

插件搜索

high

high

high

high

high

high

critical

medium

high