CVE-2023-7250

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Mar 18, 2024
Updated: Jul 2, 2024
CWE ID 183

Summary

CVE-2023-7250 is a vulnerability affecting iperf, a popular network performance testing utility. Malicious or faulty iperf clients can send insufficient data to the server, causing it to hang indefinitely. This condition prevents the server from processing other connections, leading to a denial-of-service situation. The server remains hung, waiting for the remainder of the data that will never arrive, or until the connection is terminated. Network administrators are advised to update their iperf installations to mitigate this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share