CVE-2025-47268
ping in iputils through 20240905 allows a denial of service (application error or incorrect data...
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
6.5
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
CVE-2025-47268- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2025-13377
6.5
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
EUVD-2025-13377- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-c2mm-9c32-xc37
6.5
ping in iputils through 20240905 allows a denial of service (application error or incorrect data...
ping in iputils through 20240905 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
GHSA-c2mm-9c32-xc37- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-190
- Updated
- 2026-11-02
NVD
6.5
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
CVE-2025-47268- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-47268
6.5
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
ALPINE-CVE-2025-47268- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVBELL-CVE-2025-47268
6.5
- Record
BELL-CVE-2025-47268- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
Show 33 moreShow less
OSV
6.5
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
CVE-2025-47268- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-47268
6.5
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
DEBIAN-CVE-2025-47268- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-1891
6.5
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)
- Record
OESA-2025-1891- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-1950
6.5
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)
- Record
OESA-2025-1950- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-1951
6.5
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)
- Record
OESA-2025-1951- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-1952
6.5
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)
- Record
OESA-2025-1952- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-1953
6.5
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)
- Record
OESA-2025-1953- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-1954
6.5
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)
- Record
OESA-2025-1954- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2025:11320
6.5
Red Hat Security Advisory: iputils security update
- Record
RHSA-2025:11320- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2025:11321
6.5
Red Hat Security Advisory: iputils security update
- Record
RHSA-2025:11321- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2025:9421
6.5
Red Hat Security Advisory: iputils security update
- Record
RHSA-2025:9421- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2025:9432
6.5
Red Hat Security Advisory: iputils security update
- Record
RHSA-2025:9432- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRLSA-2025:9421
6.5
Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping.
Security Fix(es):
- iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:9421- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRLSA-2025:9432
6.5
Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping.
Security Fix(es):
- iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:9432- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-47268
6.5
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
UBUNTU-CVE-2025-47268- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVALSA-2025:9421 No score
Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping.
Security Fix(es):
- iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:9421- Updated
- 2026-11-02
OSVALSA-2025:9432 No score
Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping.
Security Fix(es):
- iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:9432- Updated
- 2026-11-02
OSVAZL-110345 No score
CVE-2025-47268 affecting package iprutils 2.4.19-1
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
AZL-110345- Updated
- 2026-11-05
OSVAZL-64086 No score
CVE-2025-47268 affecting package iputils for versions less than 20211215-3
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
AZL-64086- Updated
- 2026-11-02
OSVAZL-64106 No score
CVE-2025-47268 affecting package iputils for versions less than 20240117-2
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
- Record
AZL-64106- Updated
- 2026-11-05
OSVCLSA-2025-1753987674 No score
iputils: Fix of CVE-2025-47268
- CVE-2025-47268: fix denial of service caused by signed 64-bit integer overflow in timestamp multiplication in ping
- Record
CLSA-2025-1753987674- Updated
- 2026-11-02
OSVMGASA-2025-0163 No score
Updated iputils packages fix security vulnerability
ping in iputils through 20240905 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication. (CVE-2025-47268
- Record
MGASA-2025-0163- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15089-1 No score
iputils-20240905-3.1 on GA media
These are all security issues fixed in the iputils-20240905-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15089-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:01771-1 No score
Security update for iputils
This update for iputils fixes the following issues:
Security fixes:
- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300).
Other bug fixes:
- Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian systems (bsc#1243284).
- Record
SUSE-SU-2025:01771-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:01776-1 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)
- Record
SUSE-SU-2025:01776-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:01776-2 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)
- Record
SUSE-SU-2025:01776-2- Updated
- 2026-11-02
OSVSUSE-SU-2025:01777-1 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)
- Record
SUSE-SU-2025:01777-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:01779-1 No score
Security update for iputils
This update for iputils fixes the following issues:
Security fixes:
- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300).
Other bug fixes:
- Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian systems (bsc#1243284).
- Record
SUSE-SU-2025:01779-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:01779-2 No score
Security update for iputils
This update for iputils fixes the following issues:
Security fixes:
- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300).
Other bug fixes:
- Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian systems (bsc#1243284).
- Record
SUSE-SU-2025:01779-2- Updated
- 2026-11-02
OSVSUSE-SU-2025:1771-1 No score
Security update for iputils
This update for iputils fixes the following issues:
Security fixes:
- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300).
Other bug fixes:
- Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian systems (bsc#1243284).
- Record
SUSE-SU-2025:1771-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20380-1 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-47268: Fixed integer overflow in RTT calculation leading to undefined behavior (bsc#1242300)
- Record
SUSE-SU-2025:20380-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20442-1 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)
- Fix ping on s390x printing invalid ttl (bsc#1243284)
- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)
- Record
SUSE-SU-2025:20442-1- Updated
- 2026-11-02
OSVUSN-7670-1 No score
iputils vulnerability
It was discovered that the iputils ping utility incorrectly handled certain ICMP Echo Reply packets. A remote attacker could possibly use this issue to cause iputils to consume resources, leading to a denial of service.
- Record
USN-7670-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iputilsAlpine:v3.23 |
before 20250602-r0 | 20250602-r0 |
iputilsAlpine:v3.24 |
before 20250602-r0 | 20250602-r0 |
iputilsAlmaLinux:10 |
before 20240905-2.el10_0.1 | 20240905-2.el10_0.1 |
iputilsAlmaLinux:9 |
before 20210202-11.el9_6.1 | 20210202-11.el9_6.1 |
iputils-ninfodAlmaLinux:9 |
before 20210202-11.el9_6.1 | 20210202-11.el9_6.1 |
iprutilsAzure Linux:3 |
through 2.4.19-1 | None known |
iputilsAzure Linux:2 |
before 20211215-3 | 20211215-3 |
iputilsAzure Linux:3 |
before 20240117-2 | 20240117-2 |
iputilsAlpaquita:23 |
20211215-r0 and later | None known |
iputilsAlpaquita:25 |
20240905-r0 and later | None known |
Show 69 moreShow less
| Package | Affected | Fixed |
|---|---|---|
iputilsAlpaquita:stream |
20211215-r0 up to 20250602-r0 | 20250602-r0 |
iputilsTuxCare:AlmaLinux:9.2 |
before 20210202-8.el9_2.1.tuxcare.els1 | 20210202-8.el9_2.1.tuxcare.els1 |
iputils-ninfodTuxCare:AlmaLinux:9.2 |
before 20210202-8.el9_2.1.tuxcare.els1 | 20210202-8.el9_2.1.tuxcare.els1 |
iputilsDebian:12 |
All versions, plus listed versions 3:20221126-13:20221126-1+deb12u13:20240117-13:20240905-13:20240905-23:20240905-33:20250605-1 |
None known |
iputilsDebian:13 |
All versions, plus listed versions 3:20240905-33:20250605-1 |
None known |
iputilsDebian:14 |
before 3:20250605-1, plus listed versions 3:20240905-3 |
3:20250605-1 |
iputilsMageia:9 |
before 20221126-1.1.mga9 | 20221126-1.1.mga9 |
iputilsopenEuler:20.03-LTS-SP4 |
before 20190709-10.oe2003sp4 | 20190709-10.oe2003sp4 |
iputilsopenEuler:24.03-LTS |
before 20221126-7.oe2403 | 20221126-7.oe2403 |
iputilsopenEuler:24.03-LTS-SP1 |
before 20221126-7.oe2403sp1 | 20221126-7.oe2403sp1 |
iputilsopenEuler:24.03-LTS-SP2 |
before 20221126-7.oe2403sp2 | 20221126-7.oe2403sp2 |
iputilsopenEuler:22.03-LTS-SP3 |
before 20221126-7.oe2203sp3 | 20221126-7.oe2203sp3 |
iputilsopenEuler:22.03-LTS-SP4 |
before 20221126-7.oe2203sp4 | 20221126-7.oe2203sp4 |
iputils-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:20210202-9.el9_4.3 | 0:20210202-9.el9_4.3 |
iputils-debugsourceRed Hat:rhel_eus:9.4::appstream |
before 0:20210202-9.el9_4.3 | 0:20210202-9.el9_4.3 |
iputils-ninfodRed Hat:rhel_eus:9.4::appstream |
before 0:20210202-9.el9_4.3 | 0:20210202-9.el9_4.3 |
iputils-ninfod-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:20210202-9.el9_4.3 | 0:20210202-9.el9_4.3 |
iputilsRed Hat:rhel_eus:9.4::baseos |
before 0:20210202-9.el9_4.3 | 0:20210202-9.el9_4.3 |
iputils-debuginfoRed Hat:rhel_eus:9.4::baseos |
before 0:20210202-9.el9_4.3 | 0:20210202-9.el9_4.3 |
iputils-debugsourceRed Hat:rhel_eus:9.4::baseos |
before 0:20210202-9.el9_4.3 | 0:20210202-9.el9_4.3 |
iputils-ninfod-debuginfoRed Hat:rhel_eus:9.4::baseos |
before 0:20210202-9.el9_4.3 | 0:20210202-9.el9_4.3 |
iputils-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:20210202-8.el9_2.2 | 0:20210202-8.el9_2.2 |
iputils-debugsourceRed Hat:rhel_e4s:9.2::appstream |
before 0:20210202-8.el9_2.2 | 0:20210202-8.el9_2.2 |
iputils-ninfodRed Hat:rhel_e4s:9.2::appstream |
before 0:20210202-8.el9_2.2 | 0:20210202-8.el9_2.2 |
iputils-ninfod-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:20210202-8.el9_2.2 | 0:20210202-8.el9_2.2 |
iputilsRed Hat:rhel_e4s:9.2::baseos |
before 0:20210202-8.el9_2.2 | 0:20210202-8.el9_2.2 |
iputils-debuginfoRed Hat:rhel_e4s:9.2::baseos |
before 0:20210202-8.el9_2.2 | 0:20210202-8.el9_2.2 |
iputils-debugsourceRed Hat:rhel_e4s:9.2::baseos |
before 0:20210202-8.el9_2.2 | 0:20210202-8.el9_2.2 |
iputils-ninfod-debuginfoRed Hat:rhel_e4s:9.2::baseos |
before 0:20210202-8.el9_2.2 | 0:20210202-8.el9_2.2 |
iputilsRed Hat:enterprise_linux:10.0 |
before 0:20240905-2.el10_0.1 | 0:20240905-2.el10_0.1 |
iputils-debuginfoRed Hat:enterprise_linux:10.0 |
before 0:20240905-2.el10_0.1 | 0:20240905-2.el10_0.1 |
iputils-debugsourceRed Hat:enterprise_linux:10.0 |
before 0:20240905-2.el10_0.1 | 0:20240905-2.el10_0.1 |
iputils-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:20210202-11.el9_6.1 | 0:20210202-11.el9_6.1 |
iputils-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:20210202-11.el9_6.1 | 0:20210202-11.el9_6.1 |
iputils-ninfodRed Hat:enterprise_linux:9::appstream |
before 0:20210202-11.el9_6.1 | 0:20210202-11.el9_6.1 |
iputils-ninfod-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:20210202-11.el9_6.1 | 0:20210202-11.el9_6.1 |
iputilsRed Hat:enterprise_linux:9::baseos |
before 0:20210202-11.el9_6.1 | 0:20210202-11.el9_6.1 |
iputils-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:20210202-11.el9_6.1 | 0:20210202-11.el9_6.1 |
iputils-debugsourceRed Hat:enterprise_linux:9::baseos |
before 0:20210202-11.el9_6.1 | 0:20210202-11.el9_6.1 |
iputils-ninfod-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:20210202-11.el9_6.1 | 0:20210202-11.el9_6.1 |
iputilsRocky Linux:10 |
before 0:20240905-2.el10_0.1 | 0:20240905-2.el10_0.1 |
iputilsRocky Linux:9 |
before 0:20210202-11.el9_6.1 | 0:20210202-11.el9_6.1 |
iputilsSUSE:Linux Enterprise Micro 5.1 |
before s20161105-150000.8.11.1 | s20161105-150000.8.11.1 |
iputilsSUSE:Linux Enterprise Micro 5.2 |
before s20161105-150000.8.11.1 | s20161105-150000.8.11.1 |
iputilsSUSE:Linux Enterprise Micro 5.5 |
before 20221126-150500.3.11.1 | 20221126-150500.3.11.1 |
iputilsSUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 20221126-150500.3.11.1 | 20221126-150500.3.11.1 |
iputilsopenSUSE:Leap 15.6 |
before 20221126-150500.3.11.1 | 20221126-150500.3.11.1 |
iputilsSUSE:Linux Enterprise Module for Basesystem 15 SP7 |
before 20221126-150500.3.11.1 | 20221126-150500.3.11.1 |
iputilsSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before s20161105-11.9.1 | s20161105-11.9.1 |
iputilsSUSE:Linux Enterprise Micro 5.3 |
before 20211215-150400.3.19.1 | 20211215-150400.3.19.1 |
iputilsSUSE:Linux Enterprise Micro 5.4 |
before 20211215-150400.3.19.1 | 20211215-150400.3.19.1 |
iputilsSUSE:Linux Enterprise Module for Server Applications 15 SP6 |
before 20211215-150400.3.19.1 | 20211215-150400.3.19.1 |
iputilsSUSE:Linux Enterprise Module for Server Applications 15 SP7 |
before 20211215-150400.3.19.1 | 20211215-150400.3.19.1 |
iputilsSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before s20161105-150000.8.11.1 | s20161105-150000.8.11.1 |
iputilsSUSE:Linux Enterprise Server 15 SP3-LTSS |
before s20161105-150000.8.11.1 | s20161105-150000.8.11.1 |
iputilsSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before s20161105-150000.8.11.1 | s20161105-150000.8.11.1 |
iputilsSUSE:Enterprise Storage 7.1 |
before s20161105-150000.8.11.1 | s20161105-150000.8.11.1 |
iputilsSUSE:Linux Micro 6.0 |
before 20221126-4.1 | 20221126-4.1 |
iputilsSUSE:Linux Micro 6.1 From an advisory covering 2 CVEs |
before 20221126-slfo.1.1_2.1 | 20221126-slfo.1.1_2.1 |
iputilsUbuntu:14.04:LTS |
All versions, plus listed versions 3:20121221-1ubuntu13:20121221-4ubuntu13:20121221-4ubuntu1.1 |
None known |
iputilsUbuntu:16.04:LTS |
All versions, plus listed versions 3:20121221-5ubuntu2 |
None known |
iputilsUbuntu:18.04:LTS |
All versions, plus listed versions 3:20161105-1ubuntu23:20161105-1ubuntu3 |
None known |
iputilsUbuntu:20.04:LTS |
All versions, plus listed versions 3:20190709-23:20190709-33:20190709-3ubuntu1 |
None known |
iputilsUbuntu:22.04:LTS |
before 3:20211215-1ubuntu0.1, plus listed versions 3:20210202-13:20210202-1build13:20211215-1 |
3:20211215-1ubuntu0.1 |
iputilsUbuntu:24.04:LTS |
before 3:20240117-1ubuntu0.1, plus listed versions 3:20221126-13:20240117-13:20240117-1build1 |
3:20240117-1ubuntu0.1 |
iputilsUbuntu:25.10 |
before 3:20240905-3ubuntu2, plus listed versions 3:20240905-1ubuntu13:20240905-3ubuntu1 |
3:20240905-3ubuntu2 |
iputilsUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 3:20211215-1ubuntu0.1, plus listed versions 3:20210202-13:20210202-1build13:20211215-1 |
3:20211215-1ubuntu0.1 |
iputilsUbuntu:24.04:LTS From an advisory covering 2 CVEs |
before 3:20240117-1ubuntu0.1, plus listed versions 3:20221126-13:20240117-13:20240117-1build1 |
3:20240117-1ubuntu0.1 |
iputilsopenSUSE:Tumbleweed |
before 20240905-3.1 | 20240905-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-47268 is a medium vulnerability (CVSS 6.5) in Iputils, published May 5, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.77%, the 78th percentile. Fixed in iputils 20250602-r0.
References
github.com/iputils/iputils/issues/584
github.com/Zephkek/ping-rtt-overflow
bugzilla.suse.com/show_bug.cgi?id=1242300
github.com/iputils/iputils/pull/585
github.com/iputils/iputils/releases/tag/20250602
github.com/iputils/iputils/commit/070cfacd7348386173231fb16fad4983d4e6ae40
Show 51 moreShow less
nvd.nist.gov/vuln/detail/CVE-2025-47268
github.com/advisories/GHSA-c2mm-9c32-xc37
security.alpinelinux.org/vuln/CVE-2025-47268
access.redhat.com/errata/RHSA-2025:9421
access.redhat.com/security/cve/CVE-2025-47268
bugzilla.redhat.com/2364090
errata.almalinux.org/10/ALSA-2025-9421.html
access.redhat.com/errata/RHSA-2025:9432
errata.almalinux.org/9/ALSA-2025-9432.html
docs.bell-sw.com/security/cves/CVE-2025-47268
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1753987674.html
github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47268.json
security-tracker.debian.org/tracker/CVE-2025-47268
advisories.mageia.org/MGASA-2025-0163.html
bugs.mageia.org/show_bug.cgi?id=34297
lists.fedoraproject.org/archives/list/[email protected]/message/LHFUD3TRXO7AHOVSFWLKP2MKB77PEQBK
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1891
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1950
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1951
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1952
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1953
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1954
access.redhat.com/errata/RHSA-2025:11320
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2364090
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11320.json
cve.org/CVERecord?id=CVE-2025-47268
access.redhat.com/errata/RHSA-2025:11321
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11321.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9421.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9432.json
errata.rockylinux.org/RLSA-2025:9421
errata.rockylinux.org/RLSA-2025:9432
suse.com/support/update/announcement/2025/suse-su-202501771-1
bugzilla.suse.com/1242300
bugzilla.suse.com/1243284
suse.com/security/cve/CVE-2025-47268
suse.com/support/update/announcement/2025/suse-su-202501776-1
suse.com/support/update/announcement/2025/suse-su-202501776-2
suse.com/support/update/announcement/2025/suse-su-202501777-1
suse.com/support/update/announcement/2025/suse-su-202501779-1
suse.com/support/update/announcement/2025/suse-su-202501779-2
suse.com/support/update/announcement/2025/suse-su-20251771-1
suse.com/support/update/announcement/2025/suse-su-202520380-1
suse.com/support/update/announcement/2025/suse-su-202520442-1
bugzilla.suse.com/1243772
suse.com/security/cve/CVE-2025-48964
ubuntu.com/security/CVE-2025-47268
ubuntu.com/security/notices/USN-7670-1
ubuntu.com/security/CVE-2025-48964
lists.opensuse.org/archives/list/[email protected]/thread/EPWP7MAB6QVGPERQWK64CQ7SW6A5J2TL