CVE-2025-48964
Moderate: iputils security update
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
- Record
CVE-2025-48964- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2025-22340
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
- Record
EUVD-2025-22340- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
NVD
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
- Record
CVE-2025-48964- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-48964
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
- Record
ALPINE-CVE-2025-48964- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVBELL-CVE-2025-48964
- Record
BELL-CVE-2025-48964- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSV
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
- Record
CVE-2025-48964- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-190
- Updated
- 2026-11-02
Show 24 moreShow less
OSVOESA-2025-2156
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)
- Record
OESA-2025-2156- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-2157
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)
- Record
OESA-2025-2157- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-2158
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)
- Record
OESA-2025-2158- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-2159
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)
- Record
OESA-2025-2159- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-2295
iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.
Security Fix(es):
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)
- Record
OESA-2025-2295- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2025:17558
Red Hat Security Advisory: iputils security update
- Record
RHSA-2025:17558- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRHSA-2025:17559
Red Hat Security Advisory: iputils security update
- Record
RHSA-2025:17559- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRHSA-2025:17560
Red Hat Security Advisory: iputils security update
- Record
RHSA-2025:17560- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRHSA-2026:18162
Red Hat Security Advisory: iputils security update
- Record
RHSA-2026:18162- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRLSA-2025:17558
Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping.
Security Fix(es):
- iputils: iputils integer overflow (CVE-2025-48964)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:17558- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRLSA-2026:18162
Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping.
Security Fix(es):
- iputils: iputils integer overflow (CVE-2025-48964)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.
- Record
RLSA-2026:18162- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-48964
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
- Record
UBUNTU-CVE-2025-48964- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVALSA-2025:17558 No score
Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping.
Security Fix(es):
- iputils: iputils integer overflow (CVE-2025-48964)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:17558- Updated
- 2026-11-02
OSVALSA-2026:18162 No score
Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping.
Security Fix(es):
- iputils: iputils integer overflow (CVE-2025-48964)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2026:18162- Updated
- 2026-11-02
OSVAZL-110348 No score
CVE-2025-48964 affecting package iprutils 2.4.19-1
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
- Record
AZL-110348- Updated
- 2026-11-05
OSVAZL-65886 No score
CVE-2025-48964 affecting package iputils for versions less than 20211215-4
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
- Record
AZL-65886- Updated
- 2026-11-02
OSVAZL-65889 No score
CVE-2025-48964 affecting package iputils for versions less than 20240117-2
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
- Record
AZL-65889- Updated
- 2026-11-05
OSVSUSE-SU-2025:02430-1 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).
- Record
SUSE-SU-2025:02430-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02431-1 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).
- Record
SUSE-SU-2025:02431-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02432-1 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)
- Record
SUSE-SU-2025:02432-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02797-1 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).
Other bugfixes:
- Fixed ping on s390x that printed invalid ttl (bsc#1243284).
- Record
SUSE-SU-2025:02797-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20442-1 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)
- Fix ping on s390x printing invalid ttl (bsc#1243284)
- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)
- Record
SUSE-SU-2025:20442-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20502-1 No score
Security update for iputils
This update for iputils fixes the following issues:
- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)
- Record
SUSE-SU-2025:20502-1- Updated
- 2026-11-02
OSVUSN-7670-1 No score
iputils vulnerability
It was discovered that the iputils ping utility incorrectly handled certain ICMP Echo Reply packets. A remote attacker could possibly use this issue to cause iputils to consume resources, leading to a denial of service.
- Record
USN-7670-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iputilsAlpine:v3.23 |
before 20250602-r0 | 20250602-r0 |
iputilsAlpine:v3.24 |
before 20250602-r0 | 20250602-r0 |
iputilsAlmaLinux:9 |
before 20210202-11.el9_6.3 | 20210202-11.el9_6.3 |
iputils-ninfodAlmaLinux:9 |
before 20210202-11.el9_6.3 | 20210202-11.el9_6.3 |
iputilsAlmaLinux:10 |
before 20240905-5.el10 | 20240905-5.el10 |
iprutilsAzure Linux:3 |
through 2.4.19-1 | None known |
iputilsAzure Linux:2 |
before 20211215-4 | 20211215-4 |
iputilsAzure Linux:3 |
before 20240117-2 | 20240117-2 |
iputilsAlpaquita:23 |
20211215-r0 and later | None known |
iputilsAlpaquita:25 |
20240905-r0 and later | None known |
Show 57 moreShow less
| Package | Affected | Fixed |
|---|---|---|
iputilsAlpaquita:stream |
20211215-r0 up to 20250602-r0 | 20250602-r0 |
iputilsopenEuler:24.03-LTS-SP1 |
before 20221126-8.oe2403sp1 | 20221126-8.oe2403sp1 |
iputilsopenEuler:24.03-LTS-SP2 |
before 20221126-8.oe2403sp2 | 20221126-8.oe2403sp2 |
iputilsopenEuler:22.03-LTS-SP3 |
before 20221126-8.oe2203sp3 | 20221126-8.oe2203sp3 |
iputilsopenEuler:22.03-LTS-SP4 |
before 20221126-8.oe2203sp4 | 20221126-8.oe2203sp4 |
iputilsopenEuler:24.03-LTS |
before 20221126-8.oe2403 | 20221126-8.oe2403 |
iputils-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:20210202-11.el9_6.3 | 0:20210202-11.el9_6.3 |
iputils-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:20210202-11.el9_6.3 | 0:20210202-11.el9_6.3 |
iputils-ninfodRed Hat:enterprise_linux:9::appstream |
before 0:20210202-11.el9_6.3 | 0:20210202-11.el9_6.3 |
iputils-ninfod-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:20210202-11.el9_6.3 | 0:20210202-11.el9_6.3 |
iputilsRed Hat:enterprise_linux:9::baseos |
before 0:20210202-11.el9_6.3 | 0:20210202-11.el9_6.3 |
iputils-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:20210202-11.el9_6.3 | 0:20210202-11.el9_6.3 |
iputils-debugsourceRed Hat:enterprise_linux:9::baseos |
before 0:20210202-11.el9_6.3 | 0:20210202-11.el9_6.3 |
iputils-ninfod-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:20210202-11.el9_6.3 | 0:20210202-11.el9_6.3 |
iputils-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:20210202-8.el9_2.4 | 0:20210202-8.el9_2.4 |
iputils-debugsourceRed Hat:rhel_e4s:9.2::appstream |
before 0:20210202-8.el9_2.4 | 0:20210202-8.el9_2.4 |
iputils-ninfodRed Hat:rhel_e4s:9.2::appstream |
before 0:20210202-8.el9_2.4 | 0:20210202-8.el9_2.4 |
iputils-ninfod-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:20210202-8.el9_2.4 | 0:20210202-8.el9_2.4 |
iputilsRed Hat:rhel_e4s:9.2::baseos |
before 0:20210202-8.el9_2.4 | 0:20210202-8.el9_2.4 |
iputils-debuginfoRed Hat:rhel_e4s:9.2::baseos |
before 0:20210202-8.el9_2.4 | 0:20210202-8.el9_2.4 |
iputils-debugsourceRed Hat:rhel_e4s:9.2::baseos |
before 0:20210202-8.el9_2.4 | 0:20210202-8.el9_2.4 |
iputils-ninfod-debuginfoRed Hat:rhel_e4s:9.2::baseos |
before 0:20210202-8.el9_2.4 | 0:20210202-8.el9_2.4 |
iputils-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:20210202-9.el9_4.5 | 0:20210202-9.el9_4.5 |
iputils-debugsourceRed Hat:rhel_eus:9.4::appstream |
before 0:20210202-9.el9_4.5 | 0:20210202-9.el9_4.5 |
iputils-ninfodRed Hat:rhel_eus:9.4::appstream |
before 0:20210202-9.el9_4.5 | 0:20210202-9.el9_4.5 |
iputils-ninfod-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:20210202-9.el9_4.5 | 0:20210202-9.el9_4.5 |
iputilsRed Hat:rhel_eus:9.4::baseos |
before 0:20210202-9.el9_4.5 | 0:20210202-9.el9_4.5 |
iputils-debuginfoRed Hat:rhel_eus:9.4::baseos |
before 0:20210202-9.el9_4.5 | 0:20210202-9.el9_4.5 |
iputils-debugsourceRed Hat:rhel_eus:9.4::baseos |
before 0:20210202-9.el9_4.5 | 0:20210202-9.el9_4.5 |
iputils-ninfod-debuginfoRed Hat:rhel_eus:9.4::baseos |
before 0:20210202-9.el9_4.5 | 0:20210202-9.el9_4.5 |
iputilsRed Hat:enterprise_linux:10.2 |
before 0:20240905-5.el10 | 0:20240905-5.el10 |
iputils-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:20240905-5.el10 | 0:20240905-5.el10 |
iputils-debugsourceRed Hat:enterprise_linux:10.2 |
before 0:20240905-5.el10 | 0:20240905-5.el10 |
iputilsRocky Linux:9 |
before 0:20210202-11.el9_6.3 | 0:20210202-11.el9_6.3 |
iputilsRocky Linux:10 |
before 0:20240905-5.el10 | 0:20240905-5.el10 |
iputilsSUSE:Linux Enterprise Micro 5.5 |
before 20221126-150500.3.14.1 | 20221126-150500.3.14.1 |
iputilsSUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 20221126-150500.3.14.1 | 20221126-150500.3.14.1 |
iputilsSUSE:Linux Enterprise Module for Basesystem 15 SP7 |
before 20221126-150500.3.14.1 | 20221126-150500.3.14.1 |
iputilsopenSUSE:Leap 15.6 |
before 20221126-150500.3.14.1 | 20221126-150500.3.14.1 |
iputilsSUSE:Linux Enterprise Micro 5.3 |
before 20211215-150400.3.22.1 | 20211215-150400.3.22.1 |
iputilsSUSE:Linux Enterprise Micro 5.4 |
before 20211215-150400.3.22.1 | 20211215-150400.3.22.1 |
iputilsSUSE:Linux Enterprise Module for Server Applications 15 SP6 |
before 20211215-150400.3.22.1 | 20211215-150400.3.22.1 |
iputilsSUSE:Linux Enterprise Module for Server Applications 15 SP7 |
before 20211215-150400.3.22.1 | 20211215-150400.3.22.1 |
iputilsSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before s20161105-11.12.1 | s20161105-11.12.1 |
iputilsSUSE:Linux Enterprise Micro 5.1 |
before s20161105-150000.8.14.1 | s20161105-150000.8.14.1 |
iputilsSUSE:Linux Enterprise Micro 5.2 |
before s20161105-150000.8.14.1 | s20161105-150000.8.14.1 |
iputilsSUSE:Linux Micro 6.1 From an advisory covering 2 CVEs |
before 20221126-slfo.1.1_2.1 | 20221126-slfo.1.1_2.1 |
iputilsSUSE:Linux Micro 6.0 |
before 20221126-6.1 | 20221126-6.1 |
iputilsUbuntu:14.04:LTS |
All versions, plus listed versions 3:20121221-1ubuntu13:20121221-4ubuntu13:20121221-4ubuntu1.1 |
None known |
iputilsUbuntu:16.04:LTS |
All versions, plus listed versions 3:20121221-5ubuntu2 |
None known |
iputilsUbuntu:18.04:LTS |
All versions, plus listed versions 3:20161105-1ubuntu23:20161105-1ubuntu3 |
None known |
iputilsUbuntu:20.04:LTS |
All versions, plus listed versions 3:20190709-23:20190709-33:20190709-3ubuntu1 |
None known |
iputilsUbuntu:22.04:LTS |
before 3:20211215-1ubuntu0.1, plus listed versions 3:20210202-13:20210202-1build13:20211215-1 |
3:20211215-1ubuntu0.1 |
iputilsUbuntu:24.04:LTS |
before 3:20240117-1ubuntu0.1, plus listed versions 3:20221126-13:20240117-13:20240117-1build1 |
3:20240117-1ubuntu0.1 |
iputilsUbuntu:25.10 |
before 3:20240905-3ubuntu2, plus listed versions 3:20240905-1ubuntu13:20240905-3ubuntu1 |
3:20240905-3ubuntu2 |
iputilsUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 3:20211215-1ubuntu0.1, plus listed versions 3:20210202-13:20210202-1build13:20211215-1 |
3:20211215-1ubuntu0.1 |
iputilsUbuntu:24.04:LTS From an advisory covering 2 CVEs |
before 3:20240117-1ubuntu0.1, plus listed versions 3:20221126-13:20240117-13:20240117-1build1 |
3:20240117-1ubuntu0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-48964 is a medium vulnerability (CVSS 6.5) in Iputils, published June 20, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in iputils 20250602-r0.
References
github.com/iputils/iputils/issues
bugzilla.suse.com/show_bug.cgi?id=1243772
security.alpinelinux.org/vuln/CVE-2025-48964
Show 40 moreShow less
access.redhat.com/errata/RHSA-2025:17558
bugzilla.redhat.com/2382657
errata.almalinux.org/9/ALSA-2025-17558.html
nvd.nist.gov/vuln/detail/CVE-2025-48964
docs.bell-sw.com/security/cves/CVE-2025-48964
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-2156
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17558.json
cve.org/CVERecord?id=CVE-2025-48964
docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index
errata.rockylinux.org/RLSA-2025:17558
suse.com/support/update/announcement/2025/suse-su-202502430-1
ubuntu.com/security/CVE-2025-48964