CVE-2025-47268 — Integer Overflow or Wraparound in Iputils
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 33.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 5
Latest updateJul 24
Description
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:LExploitability: 3.9 | Impact: 2.5
Affected Packages7 packages
Patches
🔴Vulnerability Details
3OSV▶
CVE-2025-48964: ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP E↗2025-07-22
GHSA▶
GHSA-c2mm-9c32-xc37: ping in iputils through 20240905 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, bec↗2025-05-05
OSV▶
CVE-2025-47268: ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, beca↗2025-05-05
📋Vendor Advisories
7Microsoft▶
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lea↗2025-07-08