An update for iperf3 is now available for openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3527 Final 1.0 1.0 2026-08-30 Initial 2026-08-30 2026-08-30 openEuler SA Tool V1.0 2026-08-30 iperf3 security update An update for iperf3 is now available for openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1 Iperf is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, protocols, and buffers. Security Fix(es): A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server.(CVE-2026-71217) An update for iperf3 is now available for openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High iperf3 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3527 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-71217 https://nvd.nist.gov/vuln/detail/CVE-2026-71217 openEuler-24.03-LTS-SP3 openEuler-24.03-LTS-SP4 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS-SP1 iperf3-3.21-2.oe2403sp3.aarch64.rpm iperf3-debuginfo-3.21-2.oe2403sp3.aarch64.rpm iperf3-debugsource-3.21-2.oe2403sp3.aarch64.rpm iperf3-devel-3.21-2.oe2403sp3.aarch64.rpm iperf3-3.21-2.oe2403sp4.aarch64.rpm iperf3-debuginfo-3.21-2.oe2403sp4.aarch64.rpm iperf3-debugsource-3.21-2.oe2403sp4.aarch64.rpm iperf3-devel-3.21-2.oe2403sp4.aarch64.rpm iperf3-3.21-2.oe2003sp4.aarch64.rpm iperf3-debuginfo-3.21-2.oe2003sp4.aarch64.rpm iperf3-debugsource-3.21-2.oe2003sp4.aarch64.rpm iperf3-devel-3.21-2.oe2003sp4.aarch64.rpm iperf3-3.21-2.oe2203sp4.aarch64.rpm iperf3-debuginfo-3.21-2.oe2203sp4.aarch64.rpm iperf3-debugsource-3.21-2.oe2203sp4.aarch64.rpm iperf3-devel-3.21-2.oe2203sp4.aarch64.rpm iperf3-3.21-2.oe2403sp1.aarch64.rpm iperf3-debuginfo-3.21-2.oe2403sp1.aarch64.rpm iperf3-debugsource-3.21-2.oe2403sp1.aarch64.rpm iperf3-devel-3.21-2.oe2403sp1.aarch64.rpm iperf3-3.21-2.oe2403sp3.src.rpm iperf3-3.21-2.oe2403sp4.src.rpm iperf3-3.21-2.oe2003sp4.src.rpm iperf3-3.21-2.oe2203sp4.src.rpm iperf3-3.21-2.oe2403sp1.src.rpm iperf3-3.21-2.oe2403sp3.x86_64.rpm iperf3-debuginfo-3.21-2.oe2403sp3.x86_64.rpm iperf3-debugsource-3.21-2.oe2403sp3.x86_64.rpm iperf3-devel-3.21-2.oe2403sp3.x86_64.rpm iperf3-3.21-2.oe2403sp4.x86_64.rpm iperf3-debuginfo-3.21-2.oe2403sp4.x86_64.rpm iperf3-debugsource-3.21-2.oe2403sp4.x86_64.rpm iperf3-devel-3.21-2.oe2403sp4.x86_64.rpm iperf3-3.21-2.oe2003sp4.x86_64.rpm iperf3-debuginfo-3.21-2.oe2003sp4.x86_64.rpm iperf3-debugsource-3.21-2.oe2003sp4.x86_64.rpm iperf3-devel-3.21-2.oe2003sp4.x86_64.rpm iperf3-3.21-2.oe2203sp4.x86_64.rpm iperf3-debuginfo-3.21-2.oe2203sp4.x86_64.rpm iperf3-debugsource-3.21-2.oe2203sp4.x86_64.rpm iperf3-devel-3.21-2.oe2203sp4.x86_64.rpm iperf3-3.21-2.oe2403sp1.x86_64.rpm iperf3-debuginfo-3.21-2.oe2403sp1.x86_64.rpm iperf3-debugsource-3.21-2.oe2403sp1.x86_64.rpm iperf3-devel-3.21-2.oe2403sp1.x86_64.rpm iperf3-help-3.21-2.oe2403sp3.noarch.rpm iperf3-help-3.21-2.oe2403sp4.noarch.rpm iperf3-help-3.21-2.oe2003sp4.noarch.rpm iperf3-help-3.21-2.oe2203sp4.noarch.rpm iperf3-help-3.21-2.oe2403sp1.noarch.rpm A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server. 2026-08-30 CVE-2026-71217 openEuler-24.03-LTS-SP3 openEuler-24.03-LTS-SP4 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS-SP1 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H iperf3 security update 2026-08-30 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3527