CVE-2023-38403 Information

Description

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

Reference

https://github.com/esnet/iperf/commit/0ef151550d96cc4460f98832df84b4a1e87c65e9 https://bugs.debian.org/1040830 https://github.com/esnet/iperf/issues/1542 https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc https://cwe.mitre.org/data/definitions/130.html