CVE-2023-7250

MediumCVSS 5.3/10Last modified Nov 5, 2026

Description

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-183

Affected software

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 7	—

References

https://access.redhat.com/errata/RHSA-2024:4241Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:9185Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-7250Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2244707Issue Tracking, Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:4241Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-7250Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2244707Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/01/msg00027.html

Timeline

Published: Mar 18, 2024
Last modified: Nov 5, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-72516.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr User Submitted Posts allows CVE-2023-72525.3The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.CVE-2023-72536.1The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting SSRF attacks, which CVE-2023-72564.4In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and po CVE-2023-72586.5A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it CVE-2023-72592.4** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown CVE-2023-72607.5Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitra CVE-2023-72617.8Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation CVE-2023-72637.3Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthor CVE-2023-72649.8The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, an CVE-2023-72656.2Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availabilit CVE-2023-72668.1Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or informati