Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-26306

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be sufficient for an attacker to recover credential plaintext. It requires the attacker to send a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.6%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2024-26306
  • Es » Iperf3 » Version: 2.0
    cpe:2.3:a:es:iperf3:2.0
  • Es » Iperf3 » Version: 2.0.1
    cpe:2.3:a:es:iperf3:2.0.1
  • Es » Iperf3 » Version: 2.0.2
    cpe:2.3:a:es:iperf3:2.0.2
  • Es » Iperf3 » Version: 2.0.3
    cpe:2.3:a:es:iperf3:2.0.3
  • Es » Iperf3 » Version: 2.0.4
    cpe:2.3:a:es:iperf3:2.0.4
  • Es » Iperf3 » Version: 3
    cpe:2.3:a:es:iperf3:3
  • Es » Iperf3 » Version: 3.0
    cpe:2.3:a:es:iperf3:3.0
  • Es » Iperf3 » Version: 3.0.1
    cpe:2.3:a:es:iperf3:3.0.1
  • Es » Iperf3 » Version: 3.0.10
    cpe:2.3:a:es:iperf3:3.0.10
  • Es » Iperf3 » Version: 3.0.11
    cpe:2.3:a:es:iperf3:3.0.11
  • Es » Iperf3 » Version: 3.0.12
    cpe:2.3:a:es:iperf3:3.0.12
  • Es » Iperf3 » Version: 3.0.2
    cpe:2.3:a:es:iperf3:3.0.2
  • Es » Iperf3 » Version: 3.0.3
    cpe:2.3:a:es:iperf3:3.0.3
  • Es » Iperf3 » Version: 3.0.4
    cpe:2.3:a:es:iperf3:3.0.4
  • Es » Iperf3 » Version: 3.0.5
    cpe:2.3:a:es:iperf3:3.0.5
  • Es » Iperf3 » Version: 3.0.6
    cpe:2.3:a:es:iperf3:3.0.6
  • Es » Iperf3 » Version: 3.0.7
    cpe:2.3:a:es:iperf3:3.0.7
  • Es » Iperf3 » Version: 3.0.8
    cpe:2.3:a:es:iperf3:3.0.8
  • Es » Iperf3 » Version: 3.0.9
    cpe:2.3:a:es:iperf3:3.0.9
  • Es » Iperf3 » Version: 3.1
    cpe:2.3:a:es:iperf3:3.1
  • Es » Iperf3 » Version: 3.1.1
    cpe:2.3:a:es:iperf3:3.1.1
  • Es » Iperf3 » Version: 3.1.2
    cpe:2.3:a:es:iperf3:3.1.2
  • Es » Iperf3 » Version: 3.1.3
    cpe:2.3:a:es:iperf3:3.1.3
  • Es » Iperf3 » Version: 3.1.4
    cpe:2.3:a:es:iperf3:3.1.4
  • Es » Iperf3 » Version: 3.1.5
    cpe:2.3:a:es:iperf3:3.1.5
  • Es » Iperf3 » Version: 3.1.6
    cpe:2.3:a:es:iperf3:3.1.6
  • Es » Iperf3 » Version: 3.1.7
    cpe:2.3:a:es:iperf3:3.1.7
  • Es » Iperf3 » Version: 3.10
    cpe:2.3:a:es:iperf3:3.10
  • Es » Iperf3 » Version: 3.10.1
    cpe:2.3:a:es:iperf3:3.10.1
  • Es » Iperf3 » Version: 3.11
    cpe:2.3:a:es:iperf3:3.11
  • Es » Iperf3 » Version: 3.12
    cpe:2.3:a:es:iperf3:3.12
  • Es » Iperf3 » Version: 3.14
    cpe:2.3:a:es:iperf3:3.14
  • Es » Iperf3 » Version: 3.15
    cpe:2.3:a:es:iperf3:3.15
  • Es » Iperf3 » Version: 3.16
    cpe:2.3:a:es:iperf3:3.16
  • Es » Iperf3 » Version: 3.2
    cpe:2.3:a:es:iperf3:3.2
  • Es » Iperf3 » Version: 3.3
    cpe:2.3:a:es:iperf3:3.3
  • Es » Iperf3 » Version: 3.4
    cpe:2.3:a:es:iperf3:3.4
  • Es » Iperf3 » Version: 3.5
    cpe:2.3:a:es:iperf3:3.5
  • Es » Iperf3 » Version: 3.6
    cpe:2.3:a:es:iperf3:3.6
  • Es » Iperf3 » Version: 3.7
    cpe:2.3:a:es:iperf3:3.7
  • Es » Iperf3 » Version: 3.8
    cpe:2.3:a:es:iperf3:3.8
  • Es » Iperf3 » Version: 3.8.1
    cpe:2.3:a:es:iperf3:3.8.1
  • Es » Iperf3 » Version: 3.9
    cpe:2.3:a:es:iperf3:3.9
  • Netapp » Hci Compute Node » Version: N/A
    cpe:2.3:h:netapp:hci_compute_node:-
  • Netapp » Bootstrap Os » Version: N/A
    cpe:2.3:o:netapp:bootstrap_os:-


Contact Us

Shodan ® - All rights reserved