| Release | Version |
|---|---|
| jessie | 3.0.7-1+deb8u2 |
| stretch | 3.1.3-1+deb9u1 |
| buster | 3.6-2+deb10u1 |
| bullseye | 3.9-1+deb11u1 |
| bookworm | 3.12-1+deb12u1 |
| trixie | 3.17.1-1 |
| sid | 3.17.1-1 |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-26306 | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA, ignored) | fixed | fixed | iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server wi ... |
| CVE-2023-7250 | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA, ignored) | fixed | fixed | A flaw was found in iperf, a utility for testing network performance u ... |
| Bug | Description |
|---|---|
| CVE-2023-38403 | iperf3 before 3.14 allows peers to cause an integer overflow and heap ... |
| CVE-2016-4303 | The parse_string function in cjson.c in the cJSON library mishandles U ... |
| DSA / DLA | Description |
|---|---|
| ELA-902-1 | iperf3 - security update |
| DLA-3506-1 | iperf3 - security update |
| DSA-5455-1 | iperf3 - security update |
| DLA-2080-1 | iperf3 - security update |