Affected: AlmaLinux:9: iputils, AlmaLinux:9: iputils-ninfod

The iputils packages contain basic utilities for monitoring a network, including ping.

Security Fix(es):

* iputils: iputils integer overflow (CVE-2025-48964)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected: Alpaquita:23: iputils, Alpaquita:25: iputils, Alpaquita:stream: iputils

ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).

Affected: openEuler:24.03-LTS-SP1: iputils

The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic. Security Fix(es):

ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)

iputils: iputils integer overflow

iputils: iputils integer overflow

Affected: Rocky Linux:10: iputils

The iputils packages contain basic utilities for monitoring a network, including ping.

Security Fix(es):

* iputils: iputils integer overflow (CVE-2025-48964)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.

Security update for iputils

Affected: Ubuntu:14.04:LTS: iputils, Ubuntu:16.04:LTS: iputils, Ubuntu:18.04:LTS: iputils, Ubuntu:20.04:LTS: iputils, Ubuntu:22.04:LTS: iputils, Ubuntu:24.04:LTS: iputils, Ubuntu:25.10: iputils

ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux und Oracle Linux (iputils) ausnutzen, um einen Denial of Service Angriff durchzuführen.