CyberRota Analysis
AI-GeneratedA vulnerability in the `JSON_read()` function of iperf3 allows remote unauthenticated attackers to exploit peer-controlled message lengths, resulting in unbounded memory allocation. This can lead to excessive memory consumption, causing Denial of Service (DoS) through service slowdown or termination. Organizations using iperf3 should prioritize addressing this issue to mitigate potential disruptions in network performance.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of Service (DoS) through memory exhaustion, severe slowdown, or termination of the iperf3 service.