VulnSocial

CVE-2026-71217

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-20: 109-20
Referenced assets1 URL
By indicator
Full discourse1 post
  • Rıdvan Yağlı@ridvanyagli

    🔴 CVE-2026-71217 — iperf3'te kimlik doğrulama gerektirmeyen uzaktan DoS açığı için PoC yayınlandı. PoC, hazırlanmış JSON parametreleriyle 1000 stream × 100 MB buffer senaryosunu tetikleyerek iperf3'ün yaklaşık 1.96 GiB RAM tüketmesine ve ardından SIGSEGV ile çökmesine neden oluyor. Bazı Linux dağıtımları güvenlik yamalarını yayınladı. Etkilenen iperf3 sunucularında TCP/5201 erişimi sınırlandırılmalı ve güncel paket kullanılmalı. https://github.com/Reelix/CVE-2026-71217-PoC

    0201251.1K
    2.3K followersView on X

Explore more

Back to dashboard