Bug 910083

Summary:	<net-misc/iperf-3.14: Denial of service vulnerability
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	IN_PROGRESS ---
Severity:	normal	CC:	netmon, sam
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [noglsa cleanup]
Package list:		Runtime testing required:	---
Bug Depends on:	910085
Bug Blocks:

Description Sam James archtester

2023-07-09 08:16:00 UTC

From https://github.com/esnet/iperf/commit/679c77ad93d486131975ee45e38fa7791bc62691
"""
iperf 3.14 fixes a memory allocation hazard that allowed a remote user
to crash an iperf3 process (server or client).

More information on this specific fix can be found at:

https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
"""

Comment 1 Larry the Git Cow gentoo-dev

2023-07-09 08:16:36 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0bda7adc96edb1f8f672b1abe0dfef317818c2fc

commit 0bda7adc96edb1f8f672b1abe0dfef317818c2fc
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-07-09 08:16:26 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-07-09 08:16:26 +0000

    net-misc/iperf: add 3.14
    
    Bug: https://bugs.gentoo.org/910083
    Signed-off-by: Sam James <sam@gentoo.org>

 net-misc/iperf/Manifest          |  1 +
 net-misc/iperf/iperf-3.14.ebuild | 54 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 55 insertions(+)