CVE-2025-47268 | BDVDB-2026-277421 Detail
iputilsiputils
Description#
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
- CWE-190 Integer Overflow or Wraparound
References#
- https://github.com/iputils/iputils/issues/584
- https://github.com/Zephkek/ping-rtt-overflow/
- https://bugzilla.suse.com/show_bug.cgi?id=1242300
- https://github.com/iputils/iputils/pull/585
- https://github.com/iputils/iputils/releases/tag/20250602
- https://github.com/iputils/iputils/commit/070cfacd7348386173231fb16fad4983d4e6ae40
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.