In iperf before 3.19.1, net.c has a buffer overflow when –skip-rx-copy is used (for MSG_TRUNC in recv).
Weakness
The product protects a primary channel, but it does not use the same level of protection for an alternate channel.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iperf3 | Es | 3.19 (including) | 3.19 (including) |
| Iperf3 | Ubuntu | plucky | * |