CVE-2025-54351: Buffer Overflow in iperf3

The buffer overflow vulnerability in iperf3 allows an attacker to craft malicious input that exceeds the allocated buffer size during network performance testing. Successfully exploiting this vulnerability could lead to arbitrary code execution on the target system. This could grant the attacker complete control over the affected machine, enabling them to install malware, steal sensitive data, or disrupt network operations. Given iperf3's use in network benchmarking and performance analysis, this vulnerability poses a significant risk to systems involved in these activities.

1. Reserved2025-07-21
2. Published2025-08-03
3. Modified2025-08-04
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-54351 is to upgrade to iperf3 version 3.19.1 or later. If upgrading is not immediately feasible, consider temporarily disabling the --skip-rx-copy option, as this is the trigger for the vulnerability. Network firewalls and intrusion detection systems (IDS) should be configured to monitor for unusual network traffic patterns associated with iperf3, particularly those involving the --skip-rx-copy flag. After upgrading, confirm the fix by running iperf3 with the --skip-rx-copy flag and verifying that no crashes or unexpected behavior occurs.