https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:32:34 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:17558 <p><strong>Affected:</strong> AlmaLinux:9: iputils, AlmaLinux:9: iputils-ninfod</p> <p>The iputils packages contain basic utilities for monitoring a network, including ping.</p> <p>Security Fix(es):</p> <p>* iputils: iputils integer overflow (CVE-2025-48964)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: iputils, AlmaLinux:9: iputils-ninfod</p> <p>The iputils packages contain basic utilities for monitoring a network, including ping.</p> <p>Security Fix(es):</p> <p>* iputils: iputils integer overflow (CVE-2025-48964)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:17558 https://cve.radiocsirt.org/vuln/bdu:2026-00319 bdu:2026-00319 https://cve.radiocsirt.org/vuln/bdu:2026-00319 https://cve.radiocsirt.org/vuln/bell-cve-2025-48964 <p><strong>Affected:</strong> Alpaquita:23: iputils, Alpaquita:25: iputils, Alpaquita:stream: iputils</p> <p><strong>Affected:</strong> Alpaquita:23: iputils, Alpaquita:25: iputils, Alpaquita:stream: iputils</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-48964 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0693 certfr-2025-avi-0693 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0693 https://cve.radiocsirt.org/vuln/euvd-2026-250818 EUVD-2026-250818 https://cve.radiocsirt.org/vuln/euvd-2026-250818 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48964 <p>ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).</p> <p>ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-48964 https://cve.radiocsirt.org/vuln/msrc_cve-2025-48964 msrc_CVE-2025-48964 https://cve.radiocsirt.org/vuln/msrc_cve-2025-48964 https://cve.radiocsirt.org/vuln/oesa-2025-2156 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: iputils</p> <p>The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic. Security Fix(es):</p> <p>ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: iputils</p> <p>The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHO_REQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic. Security Fix(es):</p> <p>ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).(CVE-2025-48964)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2156 https://cve.radiocsirt.org/vuln/rhsa-2025:17558 <p>iputils: iputils integer overflow</p> <p>iputils: iputils integer overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2025:17558 https://cve.radiocsirt.org/vuln/rhsa-2025:17559 <p>iputils: iputils integer overflow</p> <p>iputils: iputils integer overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2025:17559 https://cve.radiocsirt.org/vuln/rlsa-2026:18162 <p><strong>Affected:</strong> Rocky Linux:10: iputils</p> <p>The iputils packages contain basic utilities for monitoring a network, including ping.</p> <p>Security Fix(es):</p> <p>* iputils: iputils integer overflow (CVE-2025-48964)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: iputils</p> <p>The iputils packages contain basic utilities for monitoring a network, including ping.</p> <p>Security Fix(es):</p> <p>* iputils: iputils integer overflow (CVE-2025-48964)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:18162 https://cve.radiocsirt.org/vuln/suse-su-2025:02432-1 <p>Security update for iputils</p> <p>Security update for iputils</p> https://cve.radiocsirt.org/vuln/suse-su-2025:02432-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-48964 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: iputils, Ubuntu:16.04:LTS: iputils, Ubuntu:18.04:LTS: iputils, Ubuntu:20.04:LTS: iputils, Ubuntu:22.04:LTS: iputils, Ubuntu:24.04:LTS: iputils, Ubuntu:25.10: iputils</p> <p>ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: iputils, Ubuntu:16.04:LTS: iputils, Ubuntu:18.04:LTS: iputils, Ubuntu:20.04:LTS: iputils, Ubuntu:22.04:LTS: iputils, Ubuntu:24.04:LTS: iputils, Ubuntu:25.10: iputils</p> <p>ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-48964 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2243 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux und Oracle Linux (iputils) ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux und Oracle Linux (iputils) ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2243