Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 910083 - <net-misc/iperf-3.14: Denial of service vulnerability
Summary: <net-misc/iperf-3.14: Denial of service vulnerability
Status: IN_PROGRESS
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL:
Whiteboard: B3 [noglsa cleanup]
Keywords:
Depends on: 910085
Blocks:
  Show dependency tree
 
Reported: 2023-07-09 08:16 UTC by Sam James
Modified: 2023-07-19 22:09 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-07-09 08:16:00 UTC
From https://github.com/esnet/iperf/commit/679c77ad93d486131975ee45e38fa7791bc62691
"""
iperf 3.14 fixes a memory allocation hazard that allowed a remote user
to crash an iperf3 process (server or client).

More information on this specific fix can be found at:

https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
"""
Comment 1 Larry the Git Cow gentoo-dev 2023-07-09 08:16:36 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0bda7adc96edb1f8f672b1abe0dfef317818c2fc

commit 0bda7adc96edb1f8f672b1abe0dfef317818c2fc
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-07-09 08:16:26 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-07-09 08:16:26 +0000

    net-misc/iperf: add 3.14
    
    Bug: https://bugs.gentoo.org/910083
    Signed-off-by: Sam James <sam@gentoo.org>

 net-misc/iperf/Manifest          |  1 +
 net-misc/iperf/iperf-3.14.ebuild | 54 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 55 insertions(+)