Bug 33914 - iperf3 new security issue CVE-2024-53580
Summary: iperf3 new security issue CVE-2024-53580
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, has_procedure, validated_update
Depends on:
Blocks:
 
Reported: 2025-01-14 09:46 CET by Nicolas Salguero
Modified: 2025-01-25 22:33 CET (History)
6 users (show)

See Also:
Source RPM: iperf-3.17.1-1.mga9.src.rpm
CVE: CVE-2024-53580
Status comment: Fixed upstream in 3.18


Attachments

Description Nicolas Salguero 2025-01-14 09:46:43 CET
AlmaLinux has issued an advisory on January 10:
https://lists.almalinux.org/archives/list/announce@lists.almalinux.org/message/77I3GUDI3ZWMFAYZRZIRL3FI5TCBTNBQ/
Nicolas Salguero 2025-01-14 09:47:13 CET

Source RPM: (none) => iperf-3.17.1-1.mga9.src.rpm
Status comment: (none) => Fixed upstream in 3.18
CVE: (none) => CVE-2024-53580
Whiteboard: (none) => MGA9TOO

Comment 1 Mike Rambo 2025-01-24 03:22:15 CET
Submitted an update for cauldron to 3.18 to fix CVE. Working on the update for mga9.

Assignee: bugsquad => mhrambo3501
CC: (none) => mhrambo3501

Comment 2 Mike Rambo 2025-01-24 03:42:40 CET
Package updated for Mageia 9.


Advisory:
========================

Patched iperf package fixes security vulnerability:

It was discovered that iperf 3.17.1 contains a segmentation violation via the iperf_exchange_parameters() function.


References:
https://lists.almalinux.org/archives/list/announce@lists.almalinux.org/message/77I3GUDI3ZWMFAYZRZIRL3FI5TCBTNBQ/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53580
========================

Updated packages in core/updates_testing:
========================
iperf-3.18-1.mga9
lib64iperf0-3.18-1.mga9
lib64iperf-devel-3.18-1.mga9

from iperf-3.18-1.mga9.src.rpm


test procedure https://bugs.mageia.org/show_bug.cgi?id=18743#c3

Whiteboard: MGA9TOO => (none)
Assignee: mhrambo3501 => qa-bugs
Keywords: (none) => has_procedure
Version: Cauldron => 9

Comment 3 Herman Viaene 2025-01-24 14:35:46 CET
MGA9-64 Plasma Wayland on Compaq H000SB
No installation issues.
Opening port 5201 on both sides firewall
Running client on updated laptop:
$ iperf3 -c x.x.x.x
Connecting to host x.x.x.x, port 5201
[  5] local x.x.x.y port 60598 connected to x.x.x.x port 5201
[ ID] Interval           Transfer     Bitrate         Retr  Cwnd
[  5]   0.00-1.00   sec  7.38 MBytes  61.8 Mbits/sec    0    283 KBytes       
[  5]   1.00-2.00   sec  6.50 MBytes  54.5 Mbits/sec    0    308 KBytes       
[  5]   2.00-3.00   sec  6.50 MBytes  54.5 Mbits/sec    0    308 KBytes       
[  5]   3.00-4.00   sec  6.50 MBytes  54.5 Mbits/sec    0    339 KBytes       
[  5]   4.00-5.00   sec  6.12 MBytes  51.4 Mbits/sec    0    339 KBytes       
[  5]   5.00-6.00   sec  6.50 MBytes  54.5 Mbits/sec    0    339 KBytes       
[  5]   6.00-7.00   sec  5.88 MBytes  49.3 Mbits/sec    1    249 KBytes       
[  5]   7.00-8.00   sec  7.00 MBytes  58.7 Mbits/sec    0    277 KBytes       
[  5]   8.00-9.00   sec  6.38 MBytes  53.5 Mbits/sec    0    301 KBytes       
[  5]   9.00-10.00  sec  6.25 MBytes  52.3 Mbits/sec    0    324 KBytes       
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec  65.0 MBytes  54.5 Mbits/sec    1            sender
[  5]   0.00-10.01  sec  63.1 MBytes  52.9 Mbits/sec                  receiver

Looks good

CC: (none) => herman.viaene
Whiteboard: (none) => MGA9-64-OK

PC LX 2025-01-24 17:37:44 CET

CC: (none) => mageia

Comment 4 PC LX 2025-01-24 17:52:49 CET
Installed and tested without issues.

Tested on a Gigabit Ethernet network.
Had to open a hole in the firewall.
Results are as expected. All OK.



System A: Mageia 9, x86_64, AMD Ryzen 5 5600G with Radeon Graphics.
System B: Mageia 9, x86_64, Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz.



=======================================================
==== System A
=======================================================
$ uname -a
Linux jupiter 6.6.65-desktop-2.mga9 #1 SMP PREEMPT_DYNAMIC Thu Dec 12 12:42:26 UTC 2024 x86_64 GNU/Linux
$ rpm -qa | grep iperf
lib64iperf0-3.18-1.mga9
iperf-3.18-1.mga9
$ iperf3 -s
-----------------------------------------------------------
Server listening on 5201 (test #1)
-----------------------------------------------------------
Accepted connection from 192.168.1.2, port 33084
[  5] local 192.168.1.3 port 5201 connected to 192.168.1.2 port 33090
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.00   sec   110 MBytes   926 Mbits/sec                  
[  5]   1.00-2.00   sec   110 MBytes   927 Mbits/sec                  
[  5]   2.00-3.00   sec   110 MBytes   927 Mbits/sec                  
[  5]   3.00-4.00   sec   110 MBytes   926 Mbits/sec                  
[  5]   4.00-5.00   sec   111 MBytes   928 Mbits/sec                  
[  5]   5.00-6.00   sec   110 MBytes   927 Mbits/sec                  
[  5]   6.00-7.00   sec   110 MBytes   927 Mbits/sec                  
[  5]   7.00-8.00   sec   110 MBytes   927 Mbits/sec                  
[  5]   8.00-9.00   sec   110 MBytes   927 Mbits/sec                  
[  5]   9.00-10.00  sec   111 MBytes   928 Mbits/sec                  
[  5]  10.00-10.01  sec   384 KBytes   744 Mbits/sec                  
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-10.01  sec  1.08 GBytes   927 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201 (test #2)
-----------------------------------------------------------

=======================================================
==== System B
=======================================================

$ uname -a
Linux marte 6.6.65-server-2.mga9 #1 SMP PREEMPT_DYNAMIC Thu Dec 12 14:35:32 UTC 2024 x86_64 GNU/Linux
$ rpm -qa | grep iperf
iperf-3.18-1.mga9
lib64iperf0-3.18-1.mga9
$ iperf3 -c jupiter
Connecting to host jupiter, port 5201
[  5] local 192.168.1.2 port 33090 connected to 192.168.1.3 port 5201
[ ID] Interval           Transfer     Bitrate         Retr  Cwnd
[  5]   0.00-1.00   sec   112 MBytes   942 Mbits/sec    0    399 KBytes       
[  5]   1.00-2.00   sec   111 MBytes   930 Mbits/sec    0    399 KBytes       
[  5]   2.00-3.00   sec   110 MBytes   922 Mbits/sec    0    399 KBytes       
[  5]   3.00-4.00   sec   111 MBytes   930 Mbits/sec    0    399 KBytes       
[  5]   4.00-5.00   sec   110 MBytes   925 Mbits/sec    0    399 KBytes       
[  5]   5.00-6.00   sec   111 MBytes   930 Mbits/sec    0    399 KBytes       
[  5]   6.00-7.00   sec   110 MBytes   924 Mbits/sec    0    399 KBytes       
[  5]   7.00-8.00   sec   111 MBytes   931 Mbits/sec    0    399 KBytes       
[  5]   8.00-9.00   sec   110 MBytes   923 Mbits/sec    0    399 KBytes       
[  5]   9.00-10.00  sec   111 MBytes   932 Mbits/sec    0    399 KBytes       
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec  1.08 GBytes   929 Mbits/sec    0            sender
[  5]   0.00-10.01  sec  1.08 GBytes   927 Mbits/sec                  receiver
Comment 5 Thomas Andrews 2025-01-24 19:31:46 CET
Validating.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

Comment 6 Dan Fandrich 2025-01-25 19:38:20 CET
This one is still missing an advisory.

CC: (none) => dan

katnatek 2025-01-25 19:47:58 CET

Keywords: (none) => advisory

Comment 7 Mageia Robot 2025-01-25 22:33:37 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2025-0024.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.