The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4788-1 advisory.

    It was discovered that iperf mishandled certain UTF-8 and UTF-16 strings. A remote attacker could use this     vulnerability to cause a denial of service or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An issue has been found in iperf3, an Internet Protocol bandwidth measuring tool. Bad handling of UTF8/16 strings in an embedded library could cause a denial of service (crash) or execution of arbitrary code by putting special characters in a JSON string, which triggers a heap-based buffer overflow.

For Debian 8 'Jessie', this problem has been fixed in version 3.0.7-1+deb8u1.

We recommend that you upgrade your iperf3 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

iperf was updated to the the following vulnerability :

  - CVE-2016-4303: A malicious client could have triggered a     buffer overflow / heap corruption issue by sending a     specially crafted JSON string, and possibly execute     arbitrary code (boo#984453)

New upstream release. Fixes CVE-2016-4303.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release. Fixes CVE-2016-4303.

----

update to iperf3-3.1b3

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ESnet reports :

A malicious process can connect to an iperf3 server and, by sending a malformed message on the control channel, corrupt the server process's heap area. This can lead to a crash (and a denial of service), or theoretically a remote code execution as the user running the iperf3 server. A malicious iperf3 server could potentially mount a similar attack on an iperf3 client.

ID	Name	Product	Family	Type	Severity
183553	Ubuntu 16.04 ESM : iperf3 vulnerability (USN-4788-1)	Nessus	Ubuntu Local Security Checks	Local	critical
133277	Debian DLA-2080-1 : iperf3 security update	Nessus	Debian Local Security Checks	Local	critical
93066	openSUSE Security Update : iperf (openSUSE-2016-1006)	Nessus	SuSE Local Security Checks	Local	critical
92176	Fedora 24 : iperf3 (2016-d67864115d)	Nessus	Fedora Local Security Checks	Local	critical
92129	Fedora 23 : iperf3 (2016-9693e82a25)	Nessus	Fedora Local Security Checks	Local	critical
92089	Fedora 22 : iperf3 (2016-45402a6f3b)	Nessus	Fedora Local Security Checks	Local	critical
91527	FreeBSD : iperf3 -- buffer overflow (d6bbf2d8-2cfc-11e6-800b-080027468580)	Nessus	FreeBSD Local Security Checks	Local	critical

Detections

Analytics

CVE-2016-4303

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical