PT-2025-19706 · Iputils+9 · Iputils+9

Mohamed Maatallah · Published 2025-05-05 · Updated 2026-03-10 · CVE-2025-47268

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions iputils versions through 20240905

Description The issue allows for a denial of service, resulting in application error or incorrect data collection, via a crafted ICMP Echo Reply packet. This is caused by a signed 64-bit integer overflow in timestamp multiplication.

Recommendations For versions through 20240905, as a temporary workaround, consider restricting the handling of ICMP Echo Reply packets to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2025:9421

ALSA-2025:9432

ALT-PU-2025-8533

ALT-PU-2025-8549

AZL-64086

AZL-64106

BDU:2025-11086

CVE-2025-47268

ECHO-4B45-6FF3-BBE1

INFSA-2025_9432

MGASA-2025-0163

OESA-2025-1891

OESA-2025-1950

OESA-2025-1951

OESA-2025-1952

OESA-2025-1953

OESA-2025-1954

OPENSUSE-SU-2025:15089-1

OPENSUSE-SU-2025_01776-1

OPENSUSE-SU-2025_01779-1

RHSA-2025:11320

RHSA-2025:11321

RHSA-2025:9421

RHSA-2025:9432

RHSA-2025_9432

SUSE-SU-2025:01771-1

SUSE-SU-2025:01776-1

SUSE-SU-2025:01776-2

SUSE-SU-2025:01777-1

SUSE-SU-2025:01779-1

SUSE-SU-2025:01779-2

SUSE-SU-2025:1771-1

SUSE-SU-2025:20380-1

SUSE-SU-2025:20442-1

SUSE-SU-2025_01776-1

SUSE-SU-2025_01776-2

SUSE-SU-2025_01777-1

SUSE-SU-2025_01779-1

SUSE-SU-2025_01779-2

SUSE-SU-2025_1771-1

USN-7670-1

Affected Products

Alt Linux

Almalinux

Debian

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Iputils

References · 92

• 🔥 https://github.com/Zephkek/ping-rtt-overflow · Exploit
• https://github.com/iputils/iputils/commit/070cfacd7348386173231fb16fad4983d4e6ae40 · Patch
• https://github.com/iputils/iputils/issues/584 · Patch
• https://github.com/iputils/iputils/pull/585 · Patch
• https://errata.rockylinux.org/RLSA-2025:9432 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2025-9421.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0163.html · Security Note
• https://osv.dev/vulnerability/AZL-64106 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-47268 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1953 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20442-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47268 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1771-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11086 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01777-1 · Vendor Advisory