PatchTheCVECVE-2023-7250: A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP
CVE-2023-7250 is a medium-severity flaw (CVSS 5.3) affecting iperf3, enterprise linux, enterprise linux for arm 64. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.
Why this priority
- Remotely exploitable, no login, no user action
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.9% (top 39%) |
| CISA exploited list | No |
| Weakness | CWE-183 |
| Published | 2024-03-18 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-7250?
iperf3: upgrade to 3.15; enterprise linux: mitigate or apply the listed mitigation; enterprise linux for arm 64: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2023-7250 being exploited?
CVE-2023-7250 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-7250 affect?
CVE-2023-7250 affects iperf3, enterprise linux, enterprise linux for arm 64. Severity is medium (CVSS 5.3). A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indef
How urgent is CVE-2023-7250?
Priority 44/100. Remotely exploitable, no login, no user action; On your watchlist
Related CVEs
- CVE-2024-53580 HIGH 7.5 DOWNGRADE MITIGATE iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
- CVE-2024-26306 MEDIUM 5.9 UPGRADE MITIGATE iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing s
- CVE-2023-38403 HIGH 7.5 UPGRADE MITIGATE iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.