CVE-2025-47268

EUVD-2025-13377
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 75.2%
Affected Products (NVD)
VendorProductVersion
iputilsiputils
𝑥
< 20250602
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
iputils
bookworm
unimportant
forky
3:20250605-1
fixed
sid
3:20250605-1
fixed
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
iputils
bionic
needs-triage
focal
needs-triage
jammy
Fixed 3:20211215-1ubuntu0.1
released
noble
Fixed 3:20240117-1ubuntu0.1
released
oracular
ignored
plucky
Fixed 3:20240905-1ubuntu1.1
released
questing
Fixed 3:20240905-3ubuntu2
released
resolute
Fixed 3:20240905-3ubuntu2
released
trusty
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
iputils-20211215
suse enterprise server 15 SP4
150400.3.19.1
fixed
iputils-s20161105
suse enterprise sap 15 SP3
150000.8.11.1
fixed
suse enterprise server 15 SP2
150000.8.11.1
fixed
suse enterprise server 15 SP3
150000.8.11.1
fixed
rarpd-20211215
suse enterprise server 15 SP4
150400.3.19.1
fixed
rarpd-s20161105
suse enterprise sap 15 SP3
150000.8.11.1
fixed
suse enterprise server 15 SP2
150000.8.11.1
fixed
suse enterprise server 15 SP3
150000.8.11.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
iputils
RHEL 9
0:20210202-11.el9_6.1
fixed
iputils-ninfod
RHEL 9
0:20210202-11.el9_6.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
iputils
Azure Linux 3.0
0:20240117-2.azl3
fixed
CBL-Mariner 2.0
0:20211215-3.cm2
fixed