Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Debian LTS: DLA-4032-1 Critical: iperf3 Timing Side Channel Attack

debian lts
Calendar Grey January 28, 2025
Scroller Debian Lts
Enhance iperf3 on Debian LTS to mitigate vulnerabilities linked to security threats such as denial-of-service and timing exploits.
Several security vulnerabilities have been discovered in iperf3, an internet protocol bandwidth measuring tool, which may lead to a denial-of-service
Topics%20covered

Topics Covered

security advisory denial of service debian timing attack iperf3

Summary

For Debian 11 bullseye, these problems have been fixed in version
3.9-1+deb11u2.

We recommend that you upgrade your iperf3 packages.

For the detailed security status of iperf3 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/iperf3

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: iperf3
Version: 3.9-1+deb11u2
CVE ID: CVE-2023-7250 CVE-2024-26306 CVE-2024-53580
Debian Bug: 1071751 1090931

Topics%20covered

Topics Covered

security advisory denial of service debian timing attack iperf3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.