CVE-2024-53580
CVSS 3.1 Score 7.5 of 10 (high)
Attack Complexity low
Availability high
Confidentiality none
Integrity none
Scope unchanged
Privileges Required none
Details
Published Dec 18, 2024
Updated: Dec 31, 2024
CWE ID 476
Summary
CVE-2024-53580 is a newly disclosed vulnerability affecting iPerf version 3.17.1. This issue involves a segmentation violation in the iperf_exchange_parameters() function. Exploitation of this flaw could result in crashes or unexpected behavior, potentially leading to denial-of-service conditions or even more serious consequences for unpatched systems. It is crucial for organizations using iPerf v3.17.1 to apply the available patch promptly to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Iperf
Affected Vendors
- ESnet