{"id":"CVE-2025-48964","aliases":["ALPINE-CVE-2025-48964","ALSA-2025:17558","ALSA-2026:18162","AZL-110348","AZL-65886","AZL-65889","BELL-CVE-2025-48964","EUVD-2025-22340","GHSA-25fr-jw29-74f9","OESA-2025-2156","OESA-2025-2157","OESA-2025-2158","OESA-2025-2159","OESA-2025-2295","RHSA-2025:17558","RHSA-2025:17559","RHSA-2025:17560","RHSA-2026:18162","RLSA-2025:17558","RLSA-2026:18162","SUSE-SU-2025:02430-1","SUSE-SU-2025:02431-1","SUSE-SU-2025:02432-1","SUSE-SU-2025:02797-1","SUSE-SU-2025:20442-1","SUSE-SU-2025:20502-1","UBUNTU-CVE-2025-48964","USN-7670-1"],"status":"published","title":"Moderate: iputils security update","description":"ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00404,"percentile":0.34905,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2025-06-20T14:28:28Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"iputils","fixed_in":["20250602-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"iputils","fixed_in":["20250602-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"iputils","fixed_in":["20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"iputils-ninfod","fixed_in":["20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"iputils","fixed_in":["20240905-5.el10"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"iputils","fixed_in":["20211215-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"iputils","fixed_in":["20240117-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"iputils","fixed_in":["20250602-r0"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"iputils","fixed_in":["20221126-8.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"iputils","fixed_in":["20221126-8.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"iputils","fixed_in":["20221126-8.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"iputils","fixed_in":["20221126-8.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"iputils","fixed_in":["20221126-8.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-debuginfo","fixed_in":["0:20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-debugsource","fixed_in":["0:20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-ninfod","fixed_in":["0:20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils","fixed_in":["0:20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-debuginfo","fixed_in":["0:20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-debugsource","fixed_in":["0:20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-debuginfo","fixed_in":["0:20210202-8.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-debugsource","fixed_in":["0:20210202-8.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-ninfod","fixed_in":["0:20210202-8.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-8.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils","fixed_in":["0:20210202-8.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-debuginfo","fixed_in":["0:20210202-8.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-debugsource","fixed_in":["0:20210202-8.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-8.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-debuginfo","fixed_in":["0:20210202-9.el9_4.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-debugsource","fixed_in":["0:20210202-9.el9_4.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-ninfod","fixed_in":["0:20210202-9.el9_4.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-9.el9_4.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils","fixed_in":["0:20210202-9.el9_4.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-debuginfo","fixed_in":["0:20210202-9.el9_4.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-debugsource","fixed_in":["0:20210202-9.el9_4.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-ninfod-debuginfo","fixed_in":["0:20210202-9.el9_4.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"iputils","fixed_in":["0:20240905-5.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"iputils-debuginfo","fixed_in":["0:20240905-5.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"iputils-debugsource","fixed_in":["0:20240905-5.el10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"iputils","fixed_in":["0:20210202-11.el9_6.3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"iputils","fixed_in":["0:20240905-5.el10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"iputils","fixed_in":["20221126-150500.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"iputils","fixed_in":["20221126-150500.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"iputils","fixed_in":["20221126-150500.3.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"iputils","fixed_in":["20221126-150500.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"iputils","fixed_in":["20211215-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"iputils","fixed_in":["20211215-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"iputils","fixed_in":["20211215-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"iputils","fixed_in":["20211215-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"iputils","fixed_in":["s20161105-11.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"iputils","fixed_in":["s20161105-150000.8.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"iputils","fixed_in":["s20161105-150000.8.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"iputils","fixed_in":["20221126-6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"iputils","fixed_in":["3:20211215-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"iputils","fixed_in":["3:20240117-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"iputils","fixed_in":["3:20240905-3ubuntu2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250602-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250602-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"iputils-ninfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240905-5.el10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"iprutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.4.19-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211215-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240117-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20211215-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20240905-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20211215-r0"},{"fixed":"20250602-r0"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-8.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-8.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-8.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-8.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-8.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-ninfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-ninfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-8.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-ninfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"iputils-ninfod-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-9.el9_4.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20240905-5.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"iputils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20240905-5.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"iputils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20240905-5.el10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20210202-11.el9_6.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20240905-5.el10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-150500.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-150500.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-150500.3.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-150500.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211215-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211215-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211215-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211215-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"s20161105-11.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"s20161105-150000.8.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"s20161105-150000.8.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-slfo.1.1_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221126-6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:20121221-1ubuntu1","3:20121221-4ubuntu1","3:20121221-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:20121221-5ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:20161105-1ubuntu2","3:20161105-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:20190709-2","3:20190709-3","3:20190709-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20211215-1ubuntu0.1"}]}],"versions":["3:20210202-1","3:20210202-1build1","3:20211215-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20240117-1ubuntu0.1"}]}],"versions":["3:20221126-1","3:20240117-1","3:20240117-1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20240905-3ubuntu2"}]}],"versions":["3:20240905-1ubuntu1","3:20240905-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20211215-1ubuntu0.1"}]}],"versions":["3:20210202-1","3:20210202-1build1","3:20211215-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"iputils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:20240117-1ubuntu0.1"}]}],"versions":["3:20221126-1","3:20240117-1","3:20240117-1build1"],"bundled":2}],"products":[{"vendor":"iputils","product":"iputils"}],"references":[{"url":"https://github.com/iputils/iputils/issues","tags":["web","article"]},{"url":"https://github.com/iputils/iputils/security/advisories/GHSA-25fr-jw29-74f9","tags":["advisory","article","report"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1243772","tags":["report","article"]},{"url":"https://github.com/iputils/iputils/commit/afa36390394a6e0cceba03b52b59b6d41710608c","tags":["fix","article"]},{"url":"https://github.com/iputils/iputils/releases/tag/20250602","tags":["web","report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-48964","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:17558","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-48964","tags":["report"]},{"url":"https://bugzilla.redhat.com/2382657","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-17558.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:18162","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-18162.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48964","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-48964","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48964.json","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2156","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2157","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2158","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2159","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2295","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2382657","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17558.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-48964","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:17559","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17559.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:17560","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17560.json","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18162.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:17558","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:18162","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502430-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243772","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48964","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502431-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502432-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502797-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243284","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520442-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242300","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47268","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520502-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-48964","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7670-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-47268","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-48964","description":"ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).","status":"published","published":"2025-07-22T00:00:00Z","modified":"2025-08-26T18:49:09.084Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:32:41.41198Z"}],"euvd":[{"id":"EUVD-2025-22340","description":"ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).","status":"published","published":"2025-07-22T00:00:00Z","modified":"2025-08-26T18:49:09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:31:52.651465Z"}],"nvd":[{"id":"CVE-2025-48964","description":"ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).","status":"published","published":"2025-07-22T18:15:36.02Z","modified":"2026-06-17T09:30:35.243Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:11:19.382856Z"}],"osv":[{"id":"ALPINE-CVE-2025-48964","description":"ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).","status":"published","published":"2025-07-22T18:15:36.02Z","modified":"2026-08-27T22:18:02.922279057Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2025-48964","status":"published","published":"2025-07-23T06:01:12.553003Z","modified":"2026-01-26T09:40:29.171595Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-48964","description":"ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).","status":"published","published":"2025-07-22T00:00:00Z","modified":"2026-10-28T11:01:52.067277728Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:44:50.037003Z"},{"id":"OESA-2025-2156","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)","status":"published","published":"2025-09-05T11:09:14Z","modified":"2026-08-18T01:18:09.871978796Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2157","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)","status":"published","published":"2025-09-05T11:09:14Z","modified":"2026-08-18T01:18:09.88648244Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2158","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)","status":"published","published":"2025-09-05T11:09:14Z","modified":"2026-08-18T01:18:09.804699892Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2159","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)","status":"published","published":"2025-09-05T11:09:14Z","modified":"2026-08-18T01:18:09.947035344Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2295","title":"iputils security update","description":"The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic.\r\n\r\nSecurity Fix(es):\n\nping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)","status":"published","published":"2025-09-12T11:09:22Z","modified":"2026-08-18T01:19:10.382986056Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2025:17558","title":"Red Hat Security Advisory: iputils security update","status":"published","published":"2025-10-09T10:20:48Z","modified":"2026-06-30T10:19:51Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:17559","title":"Red Hat Security Advisory: iputils security update","status":"published","published":"2025-10-09T10:20:48Z","modified":"2026-06-30T10:19:52Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:17560","title":"Red Hat Security Advisory: iputils security update","status":"published","published":"2025-10-09T10:20:49Z","modified":"2026-06-30T10:19:52Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2026:18162","title":"Red Hat Security Advisory: iputils security update","status":"published","published":"2026-05-19T10:06:37Z","modified":"2026-06-30T10:39:08Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RLSA-2025:17558","title":"Moderate: iputils security update","description":"The iputils packages contain basic utilities for monitoring a network, including ping. \n\nSecurity Fix(es):\n\n* iputils: iputils integer overflow (CVE-2025-48964)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-18T08:06:29.729758Z","modified":"2025-10-18T08:32:15.077006Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2026:18162","title":"Moderate: iputils security update","description":"The iputils packages contain basic utilities for monitoring a network, including ping. \n\nSecurity Fix(es):\n\n* iputils: iputils integer overflow (CVE-2025-48964)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.","status":"published","published":"2026-05-29T16:03:26.612421Z","modified":"2026-05-29T16:30:22.871035625Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-48964","description":"ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).","status":"published","published":"2025-07-22T18:15:00Z","modified":"2026-02-04T02:26:45.678817Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"ALSA-2025:17558","title":"Moderate: iputils security update","description":"The iputils packages contain basic utilities for monitoring a network, including ping.   \n\nSecurity Fix(es):  \n\n  * iputils: iputils integer overflow (CVE-2025-48964)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-10-08T00:00:00Z","modified":"2026-10-29T11:32:28.425628658Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2026:18162","title":"Moderate: iputils security update","description":"The iputils packages contain basic utilities for monitoring a network, including ping.   \n\nSecurity Fix(es):  \n\n  * iputils: iputils integer overflow (CVE-2025-48964)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:30:14.979136831Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-110348","title":"CVE-2025-48964 affecting package iprutils 2.4.19-1","description":"ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).","status":"published","published":"2025-07-22T18:15:36Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:18.42484Z"},{"id":"AZL-65886","title":"CVE-2025-48964 affecting package iputils for versions less than 20211215-4","description":"ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).","status":"published","published":"2025-07-22T18:15:36Z","modified":"2026-04-21T04:37:43.319754Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-65889","title":"CVE-2025-48964 affecting package iputils for versions less than 20240117-2","description":"ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).","status":"published","published":"2025-07-22T18:15:36Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.66471Z"},{"id":"SUSE-SU-2025:02430-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).\n","status":"published","published":"2025-07-21T11:23:21Z","modified":"2026-03-23T04:49:41.018043Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02431-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).\n","status":"published","published":"2025-07-21T11:23:49Z","modified":"2026-03-23T04:49:41.005019Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02432-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)\n","status":"published","published":"2025-07-21T11:23:54Z","modified":"2026-03-23T04:49:41.144286Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02797-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).\n\nOther bugfixes:\n\n- Fixed ping on s390x that printed invalid ttl (bsc#1243284).\n","status":"published","published":"2025-08-14T14:35:58Z","modified":"2026-03-23T04:47:51.825426Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:20442-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)\n- Fix ping on s390x printing invalid ttl (bsc#1243284)\n- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)\n","status":"published","published":"2025-06-20T14:28:28Z","modified":"2026-03-23T04:50:09.024479Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20502-1","title":"Security update for iputils","description":"This update for iputils fixes the following issues:\n\n- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)\n","status":"published","published":"2025-07-21T10:04:01Z","modified":"2026-03-23T04:48:17.743219Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7670-1","title":"iputils vulnerability","description":"It was discovered that the iputils ping utility incorrectly handled\ncertain ICMP Echo Reply packets. A remote attacker could possibly use this\nissue to cause iputils to consume resources, leading to a denial of\nservice.","status":"published","published":"2025-07-24T14:55:12Z","modified":"2026-04-27T18:11:19.803494Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}