OESA-2026-3527

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3527
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3527.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2026-3527
Upstream
Published
2026-08-30T04:14:54Z
Modified
2026-08-30T04:31:07.986262078Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
iperf3 security update
Details

Iperf is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, protocols, and buffers.

Security Fix(es):

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server.(CVE-2026-71217)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4
iperf3

Package

Name
iperf3
Purl
pkg:rpm/openEuler/iperf3&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.21-2.oe2003sp4

Ecosystem specific 

{
    "aarch64": [
        "iperf3-3.21-2.oe2003sp4.aarch64.rpm",
        "iperf3-debuginfo-3.21-2.oe2003sp4.aarch64.rpm",
        "iperf3-debugsource-3.21-2.oe2003sp4.aarch64.rpm",
        "iperf3-devel-3.21-2.oe2003sp4.aarch64.rpm"
    ],
    "noarch": [
        "iperf3-help-3.21-2.oe2003sp4.noarch.rpm"
    ],
    "x86_64": [
        "iperf3-3.21-2.oe2003sp4.x86_64.rpm",
        "iperf3-debuginfo-3.21-2.oe2003sp4.x86_64.rpm",
        "iperf3-debugsource-3.21-2.oe2003sp4.x86_64.rpm",
        "iperf3-devel-3.21-2.oe2003sp4.x86_64.rpm"
    ],
    "src": [
        "iperf3-3.21-2.oe2003sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3527.json"
openEuler:22.03-LTS-SP4
iperf3

Package

Name
iperf3
Purl
pkg:rpm/openEuler/iperf3&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.21-2.oe2203sp4

Ecosystem specific 

{
    "aarch64": [
        "iperf3-3.21-2.oe2203sp4.aarch64.rpm",
        "iperf3-debuginfo-3.21-2.oe2203sp4.aarch64.rpm",
        "iperf3-debugsource-3.21-2.oe2203sp4.aarch64.rpm",
        "iperf3-devel-3.21-2.oe2203sp4.aarch64.rpm"
    ],
    "noarch": [
        "iperf3-help-3.21-2.oe2203sp4.noarch.rpm"
    ],
    "x86_64": [
        "iperf3-3.21-2.oe2203sp4.x86_64.rpm",
        "iperf3-debuginfo-3.21-2.oe2203sp4.x86_64.rpm",
        "iperf3-debugsource-3.21-2.oe2203sp4.x86_64.rpm",
        "iperf3-devel-3.21-2.oe2203sp4.x86_64.rpm"
    ],
    "src": [
        "iperf3-3.21-2.oe2203sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3527.json"
openEuler:24.03-LTS-SP1
iperf3

Package

Name
iperf3
Purl
pkg:rpm/openEuler/iperf3&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.21-2.oe2403sp1

Ecosystem specific 

{
    "aarch64": [
        "iperf3-3.21-2.oe2403sp1.aarch64.rpm",
        "iperf3-debuginfo-3.21-2.oe2403sp1.aarch64.rpm",
        "iperf3-debugsource-3.21-2.oe2403sp1.aarch64.rpm",
        "iperf3-devel-3.21-2.oe2403sp1.aarch64.rpm"
    ],
    "noarch": [
        "iperf3-help-3.21-2.oe2403sp1.noarch.rpm"
    ],
    "x86_64": [
        "iperf3-3.21-2.oe2403sp1.x86_64.rpm",
        "iperf3-debuginfo-3.21-2.oe2403sp1.x86_64.rpm",
        "iperf3-debugsource-3.21-2.oe2403sp1.x86_64.rpm",
        "iperf3-devel-3.21-2.oe2403sp1.x86_64.rpm"
    ],
    "src": [
        "iperf3-3.21-2.oe2403sp1.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3527.json"
openEuler:24.03-LTS-SP3
iperf3

Package

Name
iperf3
Purl
pkg:rpm/openEuler/iperf3&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.21-2.oe2403sp3

Ecosystem specific 

{
    "aarch64": [
        "iperf3-3.21-2.oe2403sp3.aarch64.rpm",
        "iperf3-debuginfo-3.21-2.oe2403sp3.aarch64.rpm",
        "iperf3-debugsource-3.21-2.oe2403sp3.aarch64.rpm",
        "iperf3-devel-3.21-2.oe2403sp3.aarch64.rpm"
    ],
    "noarch": [
        "iperf3-help-3.21-2.oe2403sp3.noarch.rpm"
    ],
    "x86_64": [
        "iperf3-3.21-2.oe2403sp3.x86_64.rpm",
        "iperf3-debuginfo-3.21-2.oe2403sp3.x86_64.rpm",
        "iperf3-debugsource-3.21-2.oe2403sp3.x86_64.rpm",
        "iperf3-devel-3.21-2.oe2403sp3.x86_64.rpm"
    ],
    "src": [
        "iperf3-3.21-2.oe2403sp3.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3527.json"
openEuler:24.03-LTS-SP4
iperf3

Package

Name
iperf3
Purl
pkg:rpm/openEuler/iperf3&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.21-2.oe2403sp4

Ecosystem specific 

{
    "aarch64": [
        "iperf3-3.21-2.oe2403sp4.aarch64.rpm",
        "iperf3-debuginfo-3.21-2.oe2403sp4.aarch64.rpm",
        "iperf3-debugsource-3.21-2.oe2403sp4.aarch64.rpm",
        "iperf3-devel-3.21-2.oe2403sp4.aarch64.rpm"
    ],
    "noarch": [
        "iperf3-help-3.21-2.oe2403sp4.noarch.rpm"
    ],
    "x86_64": [
        "iperf3-3.21-2.oe2403sp4.x86_64.rpm",
        "iperf3-debuginfo-3.21-2.oe2403sp4.x86_64.rpm",
        "iperf3-debugsource-3.21-2.oe2403sp4.x86_64.rpm",
        "iperf3-devel-3.21-2.oe2403sp4.x86_64.rpm"
    ],
    "src": [
        "iperf3-3.21-2.oe2403sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3527.json"