CVE-2025-54349
BaseFortify
Publication date: 2025-08-03
Last updated on: 2025-11-03
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| es | iperf3 | From 3.2 (inc) to 3.19.1 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-193 | A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an off-by-one error in the iperf_auth.c file of iperf versions before 3.19.1, which leads to a heap-based buffer overflow. This means that the program writes more data to a buffer than it can hold, potentially causing memory corruption.
How can this vulnerability impact me? :
The heap-based buffer overflow caused by this vulnerability can lead to partial compromise of confidentiality, integrity, and availability of the affected system. An attacker could exploit this to cause crashes or potentially execute arbitrary code, impacting system stability and security.