iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98085 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: iperf3: Denial of Service via UDP receive worker infinite loop (CVE-2026-102253)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-72fe3625a6 advisory.

    Update 3.22. Fixes rhbz#2543656

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_88207 advisory.

    * iperf3: iperf3: Denial of Service via UDP receive worker infinite loop (CVE-2026-102253)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:88207 advisory.

    * iperf3: iperf3: Denial of Service via UDP receive worker infinite loop (CVE-2026-102253)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:88207 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: iperf3: Denial of Service via UDP receive worker infinite loop (CVE-2026-102253)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-88207 advisory.

    - DoS via UDP receive worker infinite loop (CVE-2026-102253)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-af72c5c990 advisory.

    Update to 3.22.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c6bdc4b415 advisory.

    Update to 3.22.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4678-1 advisory.

    - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial     of service via       resource exhaustion (bsc#1284405).
    - CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory     exhaustion       (bsc#1284404).
    - CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the     server's per-       test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads     (bsc#1283786).
    - CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in     decrypt_rsa_message(): a       256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787).
    - CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote     attackers to cause an       infinite loop (bsc#1283528).

    Changes for iperf:

    - Updated to version 3.22.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated     remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by     sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers     can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the     server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-     channel closure. (CVE-2026-102253)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
378893	RHEL 10 : iperf3 (RHSA-2026:98085)	Nessus	Red Hat Local Security Checks	Local	high
374581	Fedora 45 : iperf3 (2026-72fe3625a6)	Nessus	Fedora Local Security Checks	Local	high
371672	Rocky Linux 10.2 [CIQ] Security Update: iperf3 / iperf3-debuginfo / iperf3-debugsource (crlsa-2026_88207)	Nessus	Rocky Linux Local Security Checks	Local	high
371243	RockyLinux 10 : iperf3 (RLSA-2026:88207)	Nessus	Rocky Linux Local Security Checks	Local	high
370933	RHEL 10 : iperf3 (RHSA-2026:88207)	Nessus	Red Hat Local Security Checks	Local	high
370889	Oracle Linux 10 : iperf3 (ELSA-2026-88207)	Nessus	Oracle Linux Local Security Checks	Local	high
367898	Fedora 43 : iperf3 (2026-af72c5c990)	Nessus	Fedora Local Security Checks	Local	high
367897	Fedora 44 : iperf3 (2026-c6bdc4b415)	Nessus	Fedora Local Security Checks	Local	high
366401	SUSE SLES15 Security Update : iperf (SUSE-SU-2026:4678-1)	Nessus	SuSE Local Security Checks	Local	critical
351336	Linux Distros Unpatched Vulnerability : CVE-2026-102253	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-102253

high

Tenable Plugins

high

high

high

high

high

high

high

high

critical

high