iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.