AZL-105492

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105492.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-105492
Upstream
  • CVE-2026-101276
Published
2026-09-30T21:16:54Z
Modified
2026-10-05T05:34:30Z
Summary
CVE-2026-101276 affecting package iperf3 3.17.1-6
Details

iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.

References

Affected packages

Azure Linux:3 / iperf3

Package

Name
iperf3
Purl
pkg:rpm/azure-linux/iperf3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
3.17.1-6

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105492.json"