Medium severity · published Jul 22, 2025
CVE-2025-48964
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a…
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
iputils · iputils
before 20250602 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-48964
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-48964
bugzilla.suse.com
https://bugzilla.suse.com/show_bug.cgi?id=1243772
github.com
https://github.com/iputils/iputils/commit/afa36390394a6e0cceba03b52b59b6d41710608c
github.com
https://github.com/iputils/iputils/issues
github.com
https://github.com/iputils/iputils/releases/tag/20250602
github.com
https://github.com/iputils/iputils/security/advisories/GHSA-25fr-jw29-74f9
More from iputils
6.5
CVE-2025-47268
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit…
–
CVE-2000-1213
ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases…
–
CVE-2000-1214
Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow…
