ALAS2023-2023-274


Amazon Linux 2023 Security Advisory: ALAS-2023-274
Advisory Release Date: 2023-08-03 20:26 Pacific
Advisory Updated Date: 2023-08-09 23:15 Pacific
Severity: Important

Issue Overview:

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. (CVE-2023-38403)


Affected Packages:

iperf3


Issue Correction:
Run dnf update iperf3 --releasever 2023.1.20230809 to update your system.

New Packages:
aarch64:
    iperf3-devel-3.11-1.amzn2023.0.4.aarch64
    iperf3-debugsource-3.11-1.amzn2023.0.4.aarch64
    iperf3-3.11-1.amzn2023.0.4.aarch64
    iperf3-debuginfo-3.11-1.amzn2023.0.4.aarch64

src:
    iperf3-3.11-1.amzn2023.0.4.src

x86_64:
    iperf3-debugsource-3.11-1.amzn2023.0.4.x86_64
    iperf3-debuginfo-3.11-1.amzn2023.0.4.x86_64
    iperf3-devel-3.11-1.amzn2023.0.4.x86_64
    iperf3-3.11-1.amzn2023.0.4.x86_64