CVE-2025-48964

ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://bugzilla.suse.com/show_bug.cgi?id=1243772
https://github.com/iputils/iputils/commit/afa36390394a6e0cceba03b52b59b6d41710608c
https://github.com/iputils/iputils/issues
https://github.com/iputils/iputils/releases/tag/20250602
https://github.com/iputils/iputils/security/advisories/GHSA-25fr-jw29-74f9

Configurations

No configuration.

History

23 Jul 2025, 15:15

Type	Values Removed	Values Added
Summary		(es) El ping en iputils hasta la versión 20240905 permite una denegación de servicio (error de aplicación en modo ping adaptativo o recopilación incorrecta de datos) mediante un paquete de respuesta de eco ICMP manipulado, ya que una marca de tiempo cero puede generar valores intermedios grandes que presentan un desbordamiento de enteros al elevarlos al cuadrado durante los cálculos estadísticos. NOTA: Este problema existe debido a una corrección incompleta para CVE-2025-47268 (dicha corrección solo afectaba a los cálculos de marca de tiempo y no contemplaba un escenario específico donde la marca de tiempo original en la payload ICMP es cero).
Summary	(en) ping in iputils through 20240905 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).	(en) ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).
References		() https://github.com/iputils/iputils/commit/afa36390394a6e0cceba03b52b59b6d41710608c - () https://github.com/iputils/iputils/releases/tag/20250602 -
CVSS	v2 : ~~unknown~~ v3 : ~~5.4~~	v2 : unknown v3 : 6.5

22 Jul 2025, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-07-22 18:15

Updated : 2025-07-25 15:29

NVD link : CVE-2025-48964

Mitre link : CVE-2025-48964

CVE.ORG link : CVE-2025-48964

JSON object : View

Products Affected

No product.

CWE

CWE-190

Integer Overflow or Wraparound

6.5 /10