ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade iputilsUpgrade iputils-ninfod | Oct 14, 2025 | Oct 8, 2025 |
| Alpine Linux | — | Upgrade iputils | Dec 5, 2025 | Jul 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade iputils | Nov 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade iputils | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade iputils | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade iputils | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade iputilsUpgrade iputils-ninfod | Oct 10, 2025 | Jul 22, 2025 |
| Redhat_linux | — | Upgrade iputils-ninfodUpgrade iputilsNo solution existsUpgrade iputils-ninfod-debuginfoUpgrade iputils-debugsourceUpgrade iputils-debuginfo | Jul 31, 2025 | Jul 22, 2025 |
| Rocky_linux | — | Upgrade iputils-ninfodUpgrade iputils-debugsourceUpgrade iputilsUpgrade iputils-ninfod-debuginfoUpgrade iputils-debuginfo | Feb 5, 2026 | Oct 18, 2025 |
| Suse | — | Upgrade rarpdUpgrade iputils | Dec 5, 2025 | Oct 10, 2025 |
| Ubuntu | — | Upgrade iputils-ping | Jul 25, 2025 | Jul 22, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jul 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub