iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.
{ "urgency": "not yet assigned" }