CVE-2025-48964
Fixed in a distro release EPSS <1%CVSS 6.5
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
Products: iputils
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | iputils | 20240905-5.el10 |
| AlmaLinux 9 | iputils | 20210202-11.el9_6.3 |
| AlmaLinux 9 | iputils-ninfod | 20210202-11.el9_6.3 |
| Alpine 3.23 | iputils | 20250602-r0 |
| Alpine 3.24 | iputils | 20250602-r0 |
| Red Hat Enterprise Linux 10.2 | iputils | 0:20240905-5.el10 |
| Red Hat Enterprise Linux 10.2 | iputils-debuginfo | 0:20240905-5.el10 |
| Red Hat Enterprise Linux 10.2 | iputils-debugsource | 0:20240905-5.el10 |
| Red Hat Enterprise Linux 9 | iputils | 0:20210202-11.el9_6.3 |
| Red Hat Enterprise Linux 9 | iputils-debuginfo | 0:20210202-11.el9_6.3 |
| Red Hat Enterprise Linux 9 | iputils-debugsource | 0:20210202-11.el9_6.3 |
| Red Hat Enterprise Linux 9 | iputils-ninfod | 0:20210202-11.el9_6.3 |
| Red Hat Enterprise Linux 9 | iputils-ninfod-debuginfo | 0:20210202-11.el9_6.3 |
| Red Hat rhel e4s 9.2 | iputils | 0:20210202-8.el9_2.4 |
| Red Hat rhel e4s 9.2 | iputils-debuginfo | 0:20210202-8.el9_2.4 |
| Red Hat rhel e4s 9.2 | iputils-debugsource | 0:20210202-8.el9_2.4 |
| Red Hat rhel e4s 9.2 | iputils-ninfod | 0:20210202-8.el9_2.4 |
| Red Hat rhel e4s 9.2 | iputils-ninfod-debuginfo | 0:20210202-8.el9_2.4 |
| Red Hat rhel eus 9.4 | iputils | 0:20210202-9.el9_4.5 |
| Red Hat rhel eus 9.4 | iputils-debuginfo | 0:20210202-9.el9_4.5 |
| Red Hat rhel eus 9.4 | iputils-debugsource | 0:20210202-9.el9_4.5 |
| Red Hat rhel eus 9.4 | iputils-ninfod | 0:20210202-9.el9_4.5 |
| Red Hat rhel eus 9.4 | iputils-ninfod-debuginfo | 0:20210202-9.el9_4.5 |
| Rocky Linux 10 | iputils | 0:20240905-5.el10 |
| Rocky Linux 9 | iputils | 0:20210202-11.el9_6.3 |
| SUSE Linux Enterprise Micro 5.1 | iputils | s20161105-150000.8.14.1 |
| SUSE Linux Enterprise Micro 5.2 | iputils | s20161105-150000.8.14.1 |
| SUSE Linux Enterprise Micro 5.3 | iputils | 20211215-150400.3.22.1 |
| SUSE Linux Enterprise Micro 5.4 | iputils | 20211215-150400.3.22.1 |
| SUSE Linux Enterprise Micro 5.5 | iputils | 20221126-150500.3.14.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | iputils | 20221126-150500.3.14.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | iputils | 20221126-150500.3.14.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP6 | iputils | 20211215-150400.3.22.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP7 | iputils | 20211215-150400.3.22.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | iputils | s20161105-11.12.1 |
| SUSE Linux Micro 6.0 | iputils | 20221126-6.1 |
| SUSE Linux Micro 6.1 | iputils | 20221126-slfo.1.1_2.1 |
| Ubuntu 14.04 LTS | iputils | no fix |
| Ubuntu 16.04 LTS | iputils | no fix |
| Ubuntu 18.04 LTS | iputils | no fix |
| Ubuntu 20.04 LTS | iputils | no fix |
| Ubuntu 22.04 LTS | iputils | 3:20211215-1ubuntu0.1 |
| Ubuntu 24.04 LTS | iputils | 3:20240117-1ubuntu0.1 |
| Ubuntu 25.10 | iputils | 3:20240905-3ubuntu2 |
| openSUSE Leap 15.6 | iputils | 20221126-150500.3.14.1 |