I mean, sure this is technically a CVE, but this is an iperf server crash... who ever runs a public iperf instance anyway? All usages I have heard of were either on private network, or manually invoked on public network and immediately shut down after the test. Given that iperf has no authentication of any kind, it's pretty crazy to run publicly for a long interval anyway.