iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.

The version of iperf3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53580 advisory.

  - iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters()     function. (CVE-2024-53580)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0291-1 advisory.

    - Update to version 3.18
    - CVE-2024-53580: Fixed a segmentation violation via the iperf_exchange_parameters() function.
    (bsc#1234705)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4032 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4032-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Markus Koschany     January 28, 2025                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : iperf3     Version        : 3.9-1+deb11u2     CVE ID         : CVE-2023-7250 CVE-2024-26306 CVE-2024-53580     Debian Bug     : 1071751 1090931

    Several security vulnerabilities have been discovered in iperf3, an internet     protocol bandwidth measuring tool, which may lead to a denial-of-service. When     iperf3 was used as a server with RSA authentication CVE-2024-26306 allowed a     timing side channel attack in RSA decryption operations sufficient for an     attacker to recover credential plaintext.

    For Debian 11 bullseye, these problems have been fixed in version     3.9-1+deb11u2.

    We recommend that you upgrade your iperf3 packages.

    For the detailed security status of iperf3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/iperf3

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0402 advisory.

    [3.1.7-3.0.1]
    - Fixes Improper JSON Handling CVE-2024-53580 [Orabug: 37495333]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of iperf3 installed on the remote host is prior to 3.1.7-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2736 advisory.

    iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters()     function. (CVE-2024-53580)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-812 advisory.

    iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters()     function. (CVE-2024-53580)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0570 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0404 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0402 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0403 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0440 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0548 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0505 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0346 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0168 advisory.

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0168 advisory.

    [3.5-11]
    - Resolves: RHEL-72924 - Denial of Service in iperf Due to Improper JSON Handling

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:0168 advisory.

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:0161 advisory.

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0161 advisory.

    [3.9-13.1]
    - Resolves: RHEL-72929 - Denial of Service in iperf Due to Improper JSON Handling

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0168 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0161 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of iperf3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53580 advisory.

  - iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters()     function. (CVE-2024-53580)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
215548	Azure Linux 3.0 Security Update: iperf3 (CVE-2024-53580)	Nessus	Azure Linux Local Security Checks	high
214883	SUSE SLES15 / openSUSE 15 Security Update : iperf (SUSE-SU-2025:0291-1)	Nessus	SuSE Local Security Checks	high
214741	Debian dla-4032 : iperf3 - security update	Nessus	Debian Local Security Checks	high
214714	Oracle Linux 7 : iperf3 (ELSA-2025-0402)	Nessus	Oracle Linux Local Security Checks	high
214621	Amazon Linux 2 : iperf3 (ALAS-2025-2736)	Nessus	Amazon Linux Local Security Checks	high
214615	Amazon Linux 2023 : iperf3, iperf3-devel (ALAS2023-2025-812)	Nessus	Amazon Linux Local Security Checks	high
214489	RHEL 9 : iperf3 (RHSA-2025:0570)	Nessus	Red Hat Local Security Checks	high
214439	RHEL 8 : iperf3 (RHSA-2025:0404)	Nessus	Red Hat Local Security Checks	high
214438	RHEL 7 : iperf3 (RHSA-2025:0402)	Nessus	Red Hat Local Security Checks	high
214433	RHEL 8 : iperf3 (RHSA-2025:0403)	Nessus	Red Hat Local Security Checks	high
214424	RHEL 9 : iperf3 (RHSA-2025:0440)	Nessus	Red Hat Local Security Checks	high
214422	RHEL 8 : iperf3 (RHSA-2025:0548)	Nessus	Red Hat Local Security Checks	high
214420	RHEL 9 : iperf3 (RHSA-2025:0505)	Nessus	Red Hat Local Security Checks	high
214238	RHEL 8 : iperf3 (RHSA-2025:0346)	Nessus	Red Hat Local Security Checks	high
213974	RockyLinux 8 : iperf3 (RLSA-2025:0168)	Nessus	Rocky Linux Local Security Checks	high
213958	Oracle Linux 8 : iperf3 (ELSA-2025-0168)	Nessus	Oracle Linux Local Security Checks	high
213724	AlmaLinux 8 : iperf3 (ALSA-2025:0168)	Nessus	Alma Linux Local Security Checks	high
213721	AlmaLinux 9 : iperf3 (ALSA-2025:0161)	Nessus	Alma Linux Local Security Checks	high
213702	Oracle Linux 9 : iperf3 (ELSA-2025-0161)	Nessus	Oracle Linux Local Security Checks	high
213647	RHEL 8 : iperf3 (RHSA-2025:0168)	Nessus	Red Hat Local Security Checks	high
213639	RHEL 9 : iperf3 (RHSA-2025:0161)	Nessus	Red Hat Local Security Checks	high
213543	CBL Mariner 2.0 Security Update: iperf3 (CVE-2024-53580)	Nessus	MarinerOS Local Security Checks	high

Detections

Analytics

CVE-2024-53580

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high