The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-125:01 advisory.

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:1882 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:2449 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:2448 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0670 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-54350:
    In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a     malformed authentication attempt.

    CVE-2025-54349:
    In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4281 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4281-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     August 24, 2025                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : iperf3     Version        : 3.9-1+deb11u3     CVE ID         : CVE-2025-54349 CVE-2025-54350     Debian Bug     : 1110376

    Two vulnerabilities have been fixed in the IP bandwidth measuring tool iperf3.

    CVE-2025-54349

        heap buffer overflow

    CVE-2025-54350

        reachable assert

    For Debian 11 bullseye, these problems have been fixed in version     3.9-1+deb11u3.

    We recommend that you upgrade your iperf3 packages.

    For the detailed security status of iperf3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/iperf3

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:1595 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:1592 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:2328 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02749-1 advisory.

    - update to 3.19.1:
      * CVE-2025-54351: Fixed buffer overflow in net.c (bsc#1247522)
      * CVE-2025-54350: Fixed Base64Decode assertion failure and application         exit upon a malformed authentication attempt (bsc#1247520)
      * CVE-2025-54349: Fixed off-by-one error and resultant heap-based         buffer overflow (bsc#1247519)

    - update to 3.19:
      * iperf3 now supports the use of Multi-Path TCP (MPTCPv1) on Linux         with the use of the `-m` or `--mptcp` flag. (PR #1661)
      * iperf3 now supports a `--cntl-ka` option to enable TCP keepalives         on the control connection. (#812, #835, PR #1423)
      * iperf3 now supports the `MSG_TRUNC` receive option, specified by         the `--skip-rx-copy`. This theoretically improves the rated         throughput of tests at high bitrates by not delivering network         payload data to userspace. (#1678, PR #1717)
      * A bug that caused the bitrate setting to be ignored when bursts         are set, has been fixed. (#1773, #1820, PR #1821, PR #1848)
      * The congestion control protocol setting, if used, is now         properly reset between tests. (PR #1812)
      * iperf3 now exits with a non-error 0 exit code if exiting via a         `SIGTERM`, `SIGHUP`, or `SIGINT`. (#1009, PR# 1829)
      * The current behavior of iperf3 with respect to the `-n` and `-k`         options is now documented as correct. (#1768, #1775, #596, PR #1800)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:1597 advisory.

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:1595 advisory.

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:1592 advisory.

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:1967 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the iperf package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
297635	MiracleLinux 9 : iperf3-3.9-14.el9_7.1 (AXSA:2026-125:01)	Nessus	Miracle Linux Local Security Checks	2026/2/3	2026/2/3	critical
297812	RHEL 9 : iperf3 (RHSA-2026:1882)	Nessus	Red Hat Local Security Checks	2026/2/4	2026/2/4	critical
298571	RHEL 8 : iperf3 (RHSA-2026:2449)	Nessus	Red Hat Local Security Checks	2026/2/10	2026/2/10	critical
298593	RHEL 8 : iperf3 (RHSA-2026:2448)	Nessus	Red Hat Local Security Checks	2026/2/10	2026/2/10	critical
253491	TencentOS Server 4: iperf3 (TSSA-2025:0670)	Nessus	Tencent Local Security Checks	2025/8/21	2025/12/4	critical
254406	Debian dla-4281 : iperf3 - security update	Nessus	Debian Local Security Checks	2025/8/24	2025/8/24	critical
297166	RHEL 9 : iperf3 (RHSA-2026:1595)	Nessus	Red Hat Local Security Checks	2026/1/29	2026/1/29	critical
297170	RHEL 8 : iperf3 (RHSA-2026:1592)	Nessus	Red Hat Local Security Checks	2026/1/29	2026/1/29	critical
298393	RHEL 8 : iperf3 (RHSA-2026:2328)	Nessus	Red Hat Local Security Checks	2026/2/9	2026/2/9	critical
249091	SUSE SLES15 / openSUSE 15 Security Update : iperf (SUSE-SU-2025:02749-1)	Nessus	SuSE Local Security Checks	2025/8/12	2025/8/12	critical
297561	AlmaLinux 10 : iperf3 (ALSA-2026:1597)	Nessus	Alma Linux Local Security Checks	2026/2/2	2026/2/2	critical
297565	AlmaLinux 9 : iperf3 (ALSA-2026:1595)	Nessus	Alma Linux Local Security Checks	2026/2/2	2026/2/2	critical
297675	RockyLinux 8 : iperf3 (RLSA-2026:1592)	Nessus	Rocky Linux Local Security Checks	2026/2/3	2026/2/3	critical
297987	RHEL 10 : iperf3 (RHSA-2026:1967)	Nessus	Red Hat Local Security Checks	2026/2/5	2026/2/5	critical
251225	Photon OS 4.0: Iperf PHSA-2025-4.0-0849	Nessus	PhotonOS Local Security Checks	2025/8/18	2025/8/18	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical