Amazon Linux 2023 Security Advisory: ALAS-2023-274
Advisory Release Date: 2023-08-03 20:26 Pacific
Advisory Updated Date: 2023-08-09 23:15 Pacific
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. (CVE-2023-38403)
Affected Packages:
iperf3
Issue Correction:
Run dnf update iperf3 --releasever 2023.1.20230809 to update your system.
aarch64:
iperf3-devel-3.11-1.amzn2023.0.4.aarch64
iperf3-debugsource-3.11-1.amzn2023.0.4.aarch64
iperf3-3.11-1.amzn2023.0.4.aarch64
iperf3-debuginfo-3.11-1.amzn2023.0.4.aarch64
src:
iperf3-3.11-1.amzn2023.0.4.src
x86_64:
iperf3-debugsource-3.11-1.amzn2023.0.4.x86_64
iperf3-debuginfo-3.11-1.amzn2023.0.4.x86_64
iperf3-devel-3.11-1.amzn2023.0.4.x86_64
iperf3-3.11-1.amzn2023.0.4.x86_64