---
id: CVE-2023-7250
title: 'Iperf3: possible denial of service'
summary: >-
  A flaw was found in iperf, a utility for testing network performance using
  TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than
  the expected amount of data to the iperf server, which can cause the server to
  hang in…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
cvssSource: cna
cwe:
  - CWE-183
vendor: Red Hat
product: iperf3
affected:
  - iperf3 (all versions)
  - iperf3 (all versions)
  - iperf3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-03-21T15:29:57.730662Z'
published: '2024-03-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T11:38:16.904Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-7250'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2024:4241'
    label: 'RHSA-2024:4241'
  - url: 'https://access.redhat.com/errata/RHSA-2024:9185'
    label: 'RHSA-2024:9185'
  - url: 'https://access.redhat.com/security/cve/CVE-2023-7250'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2244707'
    label: RHBZ#2244707
tags:
  - cve.org
epss: 0.00932
epssPercentile: 0.60911
ingestedAt: '2026-11-05T21:36:00.815Z'
---

## Overview

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.

## Affected

- `iperf3 (all versions)`
- `iperf3 (all versions)`
- `iperf3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.