Threats Tagged 'cve-2026-71217'

A security vulnerability in iperf3 allows the server to accept unbounded peer-controlled JSON parameters, which can lead to remote denial of service via resource exhaustion. This issue is tracked as CVE-2026-71217 and affects Red Hat Enterprise Linux 9 and its variants. Red Hat has issued a security advisory and provided updated packages to address this vulnerability.

A vulnerability in iperf3 allows remote attackers to cause a denial of service by sending crafted JSON control-channel parameters with oversized numeric values. These parameters are not properly validated, leading to excessive resource consumption such as stream and thread creation and large buffer allocations. This results in resource exhaustion and potential service disruption on the affected iperf3 server. Red Hat has released security updates to address this issue in their Enterprise Linux 8 distributions.

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server.