CVE-2025-47268

ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
mitreCNA
6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CISA-ADPADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Debian logo
Debian Releases
Debian Product
Codename
iputils
bullseye
unimportant
bookworm
unimportant
trixie
unimportant
forky
3:20250605-1
fixed
sid
3:20250605-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
iputils
plucky
Fixed 3:20240905-1ubuntu1.1
released
oracular
ignored
noble
Fixed 3:20240117-1ubuntu0.1
released
jammy
Fixed 3:20211215-1ubuntu0.1
released
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
trusty
needs-triage
Common Weakness Enumeration
References
https://bugzilla.suse.com/show_bug.cgi?id=1242300
https://github.com/Zephkek/ping-rtt-overflow/
https://github.com/iputils/iputils/issues/584
https://github.com/iputils/iputils/pull/585
https://github.com/iputils/iputils/releases/tag/20250602
https://github.com/Zephkek/ping-rtt-overflow/