Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
Red Hat iperf3 Security Update Exposes Network Data
published 9 months ago
Summary
A security update is available for Red Hat's iperf3 tool, which is used for network performance testing. If not updated, this could allow attackers to execute arbitrary code on systems running iperf3, potentially compromising system security. Update to the latest version of iperf3 to ensure system security.
What to do
- Update redhat iperf3 to version 0:3.9-11.el9_4.2.
- Update redhat iperf3-debuginfo to version 0:3.9-11.el9_4.2.
- Update redhat iperf3-debugsource to version 0:3.9-11.el9_4.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_eus:9.4::appstream | redhat | iperf3 |
< 0:3.9-11.el9_4.2 Fix: upgrade to 0:3.9-11.el9_4.2
|
| Red Hat:rhel_eus:9.4::appstream | redhat | iperf3-debuginfo |
< 0:3.9-11.el9_4.2 Fix: upgrade to 0:3.9-11.el9_4.2
|
| Red Hat:rhel_eus:9.4::appstream | redhat | iperf3-debugsource |
< 0:3.9-11.el9_4.2 Fix: upgrade to 0:3.9-11.el9_4.2
|
Original advisory text
Red Hat Security Advisory: iperf3 security update
References
- https://access.redhat.com/errata/RHSA-2026:1773 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2386151 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1773.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-54349 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-54349 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-54349 Vendor Advisory
- https://github.com/esnet/iperf/commit/4e5313bab0b9b3fe03513ab54f722c8a3e4b7bdf Third Party Advisory
- https://github.com/esnet/iperf/releases/tag/3.19.1 Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published3 Feb 2026
Updated10 Jun 2026
First seen10 Jun 2026
Sources
RHSA-2026:1773 · OSV
Track software like this
Free during beta