PT-2025-30357 · Suse+9 · Sles 15 Sp6+13

Published 2025-05-28 · Updated 2026-05-19 · CVE-2025-48964

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions iputils versions prior to patch availability. openSUSE Leap 15.5 openSUSE Leap 15.6 SUSE Linux Enterprise Server (SLES) 12 SP5 SLES 15 SP6 SLES 15 SP7

Description An integer overflow exists in iputils, specifically within the ping statistics functionality. This issue could potentially lead to a denial-of-service condition.

Recommendations Apply the available patch for openSUSE Leap 15.5. Apply the available patch for openSUSE Leap 15.6. Apply the available patch for SLES 12 SP5. Apply the available patch for SLES 15 SP6. Apply the available patch for SLES 15 SP7. Use the command zypper in -t patch [ID] to apply the patch.

Fix

DoS

RCE

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2025:17558

ALSA-2026:18162

ALT-PU-2025-8533

ALT-PU-2025-8549

AZL-65886

AZL-65889

BDU:2025-11086

BDU:2026-00319

CVE-2025-48964

GHSA-25FR-JW29-74F9

INFSA-2025_17558

OESA-2025-2156

OESA-2025-2157

OESA-2025-2158

OESA-2025-2159

OESA-2025-2295

RHSA-2025:17558

RHSA-2025:17559

RHSA-2025:17560

RHSA-2025_17558

RHSA-2026:18162

SUSE-SU-2025:02430-1

SUSE-SU-2025:02431-1

SUSE-SU-2025:02432-1

SUSE-SU-2025:02797-1

SUSE-SU-2025:20442-1

SUSE-SU-2025:20502-1

SUSE-SU-2025_02430-1

SUSE-SU-2025_02431-1

SUSE-SU-2025_02432-1

USN-7670-1

Affected Products

Alt Linux

Almalinux

Linuxmint

Red Hat

Red Os

Rocky Linux

Sles 15 Sp6

Sles 15 Sp7

Suse Linux Enterprise Server (Sles) 12 Sp5

Suse

Ubuntu

Iputils

Opensuse Leap 15.5

Opensuse Leap 15.6

References · 81

• https://osv.dev/vulnerability/SUSE-SU-2025:02430-1 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-18162.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-48964 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-65889 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2157 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-17558.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:17558 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-48964 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:17558 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-48964 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20502-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-48964 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11086 · Security Note
• https://osv.dev/vulnerability/OESA-2025-2159 · Vendor Advisory
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory