{"id":"CVE-2025-47268","aliases":["ALPINE-CVE-2025-47268","ALSA-2025:9421","ALSA-2025:9432","AZL-110345","AZL-64086","AZL-64106","BELL-CVE-2025-47268","CLSA-2025-1753987674","DEBIAN-CVE-2025-47268","EUVD-2025-13377","GHSA-c2mm-9c32-xc37","MGASA-2025-0163","OESA-2025-1891","OESA-2025-1950","OESA-2025-1951","OESA-2025-1952","OESA-2025-1953","OESA-2025-1954","RHSA-2025:11320","RHSA-2025:11321","RHSA-2025:9421","RHSA-2025:9432","RLSA-2025:9421","RLSA-2025:9432","SUSE-SU-2025:01771-1","SUSE-SU-2025:01776-1","SUSE-SU-2025:01776-2","SUSE-SU-2025:01777-1","SUSE-SU-2025:01779-1","SUSE-SU-2025:01779-2","SUSE-SU-2025:1771-1","SUSE-SU-2025:20380-1","SUSE-SU-2025:20442-1","UBUNTU-CVE-2025-47268","USN-7670-1","openSUSE-SU-2025:15089-1"],"status":"published","title":"ping in iputils through 20240905 allows a denial of service (application error or incorrect data...","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01775,"percentile":0.78485,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2025-05-05T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"iputils","fixed_in":["20250602-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"iputils","fixed_in":["20250602-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"iputils","fixed_in":["20240905-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"iputils","fixed_in":["20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"iputils-ninfod","fixed_in":["20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"iputils","fixed_in":["20211215-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"iputils","fixed_in":["20240117-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"iputils","fixed_in":["20250602-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"iputils","fixed_in":["20210202-8.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"iputils-ninfod","fixed_in":["20210202-8.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"iputils","fixed_in":["3:20250605-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"iputils","fixed_in":["20221126-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"iputils","fixed_in":["20190709-10.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"iputils","fixed_in":["20221126-7.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"iputils","fixed_in":["20221126-7.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"iputils","fixed_in":["20221126-7.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"iputils","fixed_in":["20221126-7.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"iputils","fixed_in":["20221126-7.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-debuginfo","fixed_in":["0:20210202-9.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-debugsource","fixed_in":["0:20210202-9.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-ninfod","fixed_in":["0:20210202-9.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-9.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils","fixed_in":["0:20210202-9.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-debuginfo","fixed_in":["0:20210202-9.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-debugsource","fixed_in":["0:20210202-9.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-9.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-debuginfo","fixed_in":["0:20210202-8.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-debugsource","fixed_in":["0:20210202-8.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-ninfod","fixed_in":["0:20210202-8.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-8.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils","fixed_in":["0:20210202-8.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-debuginfo","fixed_in":["0:20210202-8.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-debugsource","fixed_in":["0:20210202-8.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-8.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"iputils","fixed_in":["0:20240905-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"iputils-debuginfo","fixed_in":["0:20240905-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"iputils-debugsource","fixed_in":["0:20240905-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-debuginfo","fixed_in":["0:20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-debugsource","fixed_in":["0:20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-ninfod","fixed_in":["0:20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils","fixed_in":["0:20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-debuginfo","fixed_in":["0:20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-debugsource","fixed_in":["0:20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"iputils","fixed_in":["0:20240905-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"iputils","fixed_in":["0:20210202-11.el9_6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"iputils","fixed_in":["s20161105-150000.8.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"iputils","fixed_in":["s20161105-150000.8.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"iputils","fixed_in":["20221126-150500.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"iputils","fixed_in":["20221126-150500.3.11.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"iputils","fixed_in":["20221126-150500.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"iputils","fixed_in":["20221126-150500.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"iputils","fixed_in":["s20161105-11.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"iputils","fixed_in":["20211215-150400.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"iputils","fixed_in":["20211215-150400.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"iputils","fixed_in":["20211215-150400.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"iputils","fixed_in":["20211215-150400.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"iputils","fixed_in":["s20161105-150000.8.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"iputils","fixed_in":["s20161105-150000.8.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"iputils","fixed_in":["s20161105-150000.8.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"iputils","fixed_in":["s20161105-150000.8.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"iputils","fixed_in":["20221126-4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"iputils","fixed_in":["3:20211215-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"iputils","fixed_in":["3:20240117-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"iputils","fixed_in":["3:20240905-3ubuntu2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"iputils","fixed_in":["20240905-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250602-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250602-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240905-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"iputils-ninfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"iprutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.4.19-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211215-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240117-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20211215-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20240905-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20211215-r0"},{"fixed":"20250602-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210202-8.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"iputils-ninfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210202-8.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:20221126-1","3:20221126-1+deb12u1","3:20240117-1","3:20240905-1","3:20240905-2","3:20240905-3","3:20250605-1"]},{"source":"osv","ecosystem":"Debian:13","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:20240905-3","3:20250605-1"]},{"source":"osv","ecosystem":"Debian:14","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20250605-1"}]}],"versions":["3:20240905-3"]},{"source":"osv","ecosystem":"Mageia:9","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190709-10.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-7.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-7.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-7.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-7.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-7.oe2203sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-ninfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-ninfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20240905-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20240905-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20240905-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-ninfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20240905-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"s20161105-150000.8.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"s20161105-150000.8.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-150500.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-150500.3.11.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-150500.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-150500.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"s20161105-11.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211215-150400.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211215-150400.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211215-150400.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211215-150400.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"s20161105-150000.8.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"s20161105-150000.8.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"s20161105-150000.8.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"s20161105-150000.8.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-slfo.1.1_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:20121221-1ubuntu1","3:20121221-4ubuntu1","3:20121221-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:20121221-5ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:20161105-1ubuntu2","3:20161105-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:20190709-2","3:20190709-3","3:20190709-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20211215-1ubuntu0.1"}]}],"versions":["3:20210202-1","3:20210202-1build1","3:20211215-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20240117-1ubuntu0.1"}]}],"versions":["3:20221126-1","3:20240117-1","3:20240117-1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20240905-3ubuntu2"}]}],"versions":["3:20240905-1ubuntu1","3:20240905-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20211215-1ubuntu0.1"}]}],"versions":["3:20210202-1","3:20210202-1build1","3:20211215-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20240117-1ubuntu0.1"}]}],"versions":["3:20221126-1","3:20240117-1","3:20240117-1build1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240905-3.1"}]}]}],"products":[{"vendor":"iputils","product":"iputils"}],"references":[{"url":"https://github.com/iputils/iputils/issues/584","tags":["Exploit","Issue Tracking","Patch","report","article"]},{"url":"https://github.com/Zephkek/ping-rtt-overflow/","tags":["exploit","Exploit","Third Party Advisory","web","article","report"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1242300","tags":["Issue Tracking","report"]},{"url":"https://github.com/iputils/iputils/pull/585","tags":["Exploit","Issue Tracking","Patch","fix","report"]},{"url":"https://github.com/iputils/iputils/releases/tag/20250602","tags":["Release Notes","web"]},{"url":"https://github.com/iputils/iputils/commit/070cfacd7348386173231fb16fad4983d4e6ae40","tags":["Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47268","tags":["web","advisory"]},{"url":"https://github.com/Zephkek/ping-rtt-overflow"},{"url":"https://github.com/advisories/GHSA-c2mm-9c32-xc37"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-47268","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9421","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-47268","tags":["report"]},{"url":"https://bugzilla.redhat.com/2364090","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-9421.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9432","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-9432.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-47268","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1753987674.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47268.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-47268","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0163.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34297","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LHFUD3TRXO7AHOVSFWLKP2MKB77PEQBK/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1891","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1950","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1951","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1952","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1953","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1954","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:11320","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2364090","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11320.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-47268","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:11321","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11321.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9421.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9432.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:9421","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:9432","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501771-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242300","tags":["report"]},{"url":"https://bugzilla.suse.com/1243284","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47268","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501776-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501776-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501777-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501779-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501779-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251771-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520380-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520442-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243772","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48964","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-47268","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7670-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-48964","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EPWP7MAB6QVGPERQWK64CQ7SW6A5J2TL/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-47268","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T00:00:00Z","modified":"2026-01-26T16:15:08.135Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:32:25.982948Z"}],"euvd":[{"id":"EUVD-2025-13377","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T00:00:00Z","modified":"2026-01-26T16:15:08Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:48:47.68467Z"}],"ghsa":[{"id":"GHSA-c2mm-9c32-xc37","title":"ping in iputils through 20240905 allows a denial of service (application error or incorrect data...","description":"ping in iputils through 20240905 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T15:30:53Z","modified":"2026-01-26T18:31:27Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:05:54.187658Z"}],"nvd":[{"id":"CVE-2025-47268","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T14:15:29.063Z","modified":"2026-06-17T09:27:38.29Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:11:04.33372Z"}],"osv":[{"id":"ALPINE-CVE-2025-47268","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T14:15:29.063Z","modified":"2026-08-27T22:18:02.910356719Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2025-47268","status":"published","published":"2025-05-07T05:58:37.476963Z","modified":"2026-01-26T09:40:28.863366Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-47268","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T00:00:00Z","modified":"2026-10-28T11:01:49.087596096Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:44:49.707645Z"},{"id":"DEBIAN-CVE-2025-47268","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T14:15:29.063Z","modified":"2026-09-01T20:05:52.99594251Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"OESA-2025-1891","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)","status":"published","published":"2025-07-25T11:08:58Z","modified":"2026-08-18T01:18:55.06121611Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1950","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)","status":"published","published":"2025-08-01T11:09:02Z","modified":"2026-08-18T01:18:56.153489513Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1951","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)","status":"published","published":"2025-08-01T11:09:02Z","modified":"2026-08-18T01:18:56.391689655Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1952","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)","status":"published","published":"2025-08-01T11:09:02Z","modified":"2026-08-18T01:18:55.985274802Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1953","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)","status":"published","published":"2025-08-01T11:09:02Z","modified":"2026-08-18T01:18:56.418660227Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1954","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.(CVE-2025-47268)","status":"published","published":"2025-08-01T11:09:02Z","modified":"2026-08-18T01:18:56.036704355Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"RHSA-2025:11320","title":"Red Hat Security Advisory: iputils security update","status":"published","published":"2025-07-17T10:04:57Z","modified":"2026-09-02T10:04:15Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:11321","title":"Red Hat Security Advisory: iputils security update","status":"published","published":"2025-07-17T10:04:58Z","modified":"2026-09-02T10:04:16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:9421","title":"Red Hat Security Advisory: iputils security update","status":"published","published":"2025-06-24T10:03:13Z","modified":"2026-09-02T10:07:54Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9432","title":"Red Hat Security Advisory: iputils security update","status":"published","published":"2025-06-24T10:03:13Z","modified":"2026-09-02T10:07:56Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RLSA-2025:9421","title":"Moderate: iputils security update","description":"The iputils packages contain basic utilities for monitoring a network, including ping. \n\nSecurity Fix(es):\n\n* iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:57:04.772748Z","modified":"2025-10-08T17:12:51.230731Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2025:9432","title":"Moderate: iputils security update","description":"The iputils packages contain basic utilities for monitoring a network, including ping. \n\nSecurity Fix(es):\n\n* iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:39:54.753495Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-47268","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T14:15:00Z","modified":"2026-02-04T04:24:42.83064Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"ALSA-2025:9421","title":"Moderate: iputils security update","description":"The iputils packages contain basic utilities for monitoring a network, including ping.   \n\nSecurity Fix(es):  \n\n  * iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-24T00:00:00Z","modified":"2026-10-29T11:58:12.217547Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2025:9432","title":"Moderate: iputils security update","description":"The iputils packages contain basic utilities for monitoring a network, including ping.   \n\nSecurity Fix(es):  \n\n  * iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-24T00:00:00Z","modified":"2026-10-29T11:32:30.193467069Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-110345","title":"CVE-2025-47268 affecting package iprutils 2.4.19-1","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T14:15:29Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:18.42484Z"},{"id":"AZL-64086","title":"CVE-2025-47268 affecting package iputils for versions less than 20211215-3","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T14:15:29Z","modified":"2026-04-21T04:32:17.153831Z","updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"AZL-64106","title":"CVE-2025-47268 affecting package iputils for versions less than 20240117-2","description":"ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.","status":"published","published":"2025-05-05T14:15:29Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"CLSA-2025-1753987674","title":"iputils: Fix of CVE-2025-47268","description":"- CVE-2025-47268: fix denial of service caused by signed 64-bit integer overflow\n  in timestamp multiplication in ping","status":"published","published":"2025-07-31T18:47:57Z","modified":"2026-06-01T00:30:46.435346798Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"MGASA-2025-0163","title":"Updated iputils packages fix security vulnerability","description":"ping in iputils through 20240905 allows a denial of service (application\nerror or incorrect data collection) via a crafted ICMP Echo Reply\npacket, because of a signed 64-bit integer overflow in timestamp\nmultiplication. (CVE-2025-47268\n","status":"published","published":"2025-05-24T23:25:56Z","modified":"2026-04-16T04:43:19.239609702Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15089-1","title":"iputils-20240905-3.1 on GA media","description":"These are all security issues fixed in the iputils-20240905-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-15T00:00:00Z","modified":"2026-03-23T04:53:22.600358Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01771-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300).\n    \nOther bug fixes:\n    \n- Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian systems (bsc#1243284).\n","status":"published","published":"2025-05-30T10:41:24Z","modified":"2026-03-23T04:46:21.94435Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01776-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)\n","status":"published","published":"2025-05-30T13:02:56Z","modified":"2026-02-04T04:00:35.587929Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01776-2","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)\n","status":"published","published":"2025-06-09T13:27:23Z","modified":"2025-06-10T12:29:28.106791Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01777-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)\n","status":"published","published":"2025-05-30T13:04:03Z","modified":"2026-02-04T03:52:26.845231Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01779-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\nSecurity fixes:\n    \n- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300).\n\nOther bug fixes:\n    \n- Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian systems (bsc#1243284).\n  \n","status":"published","published":"2025-05-30T13:39:04Z","modified":"2026-02-04T02:47:49.839321Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01779-2","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\nSecurity fixes:\n    \n- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300).\n\nOther bug fixes:\n    \n- Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian systems (bsc#1243284).\n  \n","status":"published","published":"2025-06-06T12:20:50Z","modified":"2026-03-23T04:47:37.25545Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:1771-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300).\n    \nOther bug fixes:\n    \n- Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian systems (bsc#1243284).\n","status":"published","published":"2025-10-31T09:58:20Z","modified":"2026-02-04T03:10:07.579604Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20380-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-47268: Fixed integer overflow in RTT calculation leading to undefined behavior (bsc#1242300)\n","status":"published","published":"2025-06-08T13:25:40Z","modified":"2026-03-23T04:50:48.03483Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20442-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)\n- Fix ping on s390x printing invalid ttl (bsc#1243284)\n- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)\n","status":"published","published":"2025-06-20T14:28:28Z","modified":"2026-03-23T04:50:09.024479Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7670-1","title":"iputils vulnerability","description":"It was discovered that the iputils ping utility incorrectly handled\ncertain ICMP Echo Reply packets. A remote attacker could possibly use this\nissue to cause iputils to consume resources, leading to a denial of\nservice.","status":"published","published":"2025-07-24T14:55:12Z","modified":"2026-04-27T18:11:19.803494Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}