{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2025-47268", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-07-23T15:11:08.132Z", "dateReserved": "2025-05-05T00:00:00.000Z", "datePublished": "2025-05-05T00:00:00.000Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "iputils", "vendor": "iputils", "versions": [{"lessThan": "20250602", "status": "affected", "version": "0", "versionType": "custom"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:iputils:iputils:*:*:*:*:*:*:*:*", "versionEndExcluding": "20250602"}]}]}], "descriptions": [{"lang": "en", "value": "ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-190", "description": "CWE-190 Integer Overflow or Wraparound", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-07-23T15:11:08.132Z"}, "references": [{"url": "https://github.com/iputils/iputils/issues/584"}, {"url": "https://github.com/Zephkek/ping-rtt-overflow/"}, {"url": "https://bugzilla.suse.com/show_bug.cgi?id=1242300"}, {"url": "https://github.com/iputils/iputils/pull/585"}, {"url": "https://github.com/iputils/iputils/releases/tag/20250602"}], "x_generator": {"engine": "enrichogram 0.0.1"}, "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}}]}, "adp": [{"references": [{"url": "https://github.com/Zephkek/ping-rtt-overflow/", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-05T13:24:34.246742Z", "id": "CVE-2025-47268", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-05T13:24:37.998Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-47268", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-05T13:24:34.246742Z"}}}], "references": [{"url": "https://github.com/Zephkek/ping-rtt-overflow/", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-05T13:24:28.705Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}}], "affected": [{"vendor": "iputils", "product": "iputils", "versions": [{"status": "affected", "version": "0", "lessThan": "20250602", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/iputils/iputils/issues/584"}, {"url": "https://github.com/Zephkek/ping-rtt-overflow/"}, {"url": "https://bugzilla.suse.com/show_bug.cgi?id=1242300"}, {"url": "https://github.com/iputils/iputils/pull/585"}, {"url": "https://github.com/iputils/iputils/releases/tag/20250602"}], "x_generator": {"engine": "enrichogram 0.0.1"}, "descriptions": [{"lang": "en", "value": "ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-190", "description": "CWE-190 Integer Overflow or Wraparound"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:iputils:iputils:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "20250602"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-07-23T15:11:08.132Z"}}}, "cveMetadata": {"cveId": "CVE-2025-47268", "state": "PUBLISHED", "dateUpdated": "2025-07-23T15:11:08.132Z", "dateReserved": "2025-05-05T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2025-05-05T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:iputils_project:iputils:20240905:*:*:*:*:*:*:*", "matchCriteriaId": "2E28BE49-A770-46C3-84F1-2D32F0F35D54", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication."}, {"lang": "es", "value": "Ping en iputils hasta 20240905 permite una denegaci\u00f3n de servicio (error de aplicaci\u00f3n o recopilaci\u00f3n de datos incorrecta) a trav\u00e9s de un paquete de respuesta de eco ICMP manipulado, debido a un desbordamiento de entero con signo de 64 bits en la multiplicaci\u00f3n de marcas de tiempo."}], "id": "CVE-2025-47268", "lastModified": "2025-07-23T15:15:32.887", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 2.5, "source": "[email protected]", "type": "Secondary"}]}, "published": "2025-05-05T14:15:29.063", "references": [{"source": "[email protected]", "tags": ["Issue Tracking"], "url": "https://bugzilla.suse.com/show_bug.cgi?id=1242300"}, {"source": "[email protected]", "tags": ["Exploit"], "url": "https://github.com/Zephkek/ping-rtt-overflow/"}, {"source": "[email protected]", "tags": ["Exploit", "Issue Tracking", "Patch"], "url": "https://github.com/iputils/iputils/issues/584"}, {"source": "[email protected]", "tags": ["Exploit", "Issue Tracking", "Patch"], "url": "https://github.com/iputils/iputils/pull/585"}, {"source": "[email protected]", "url": "https://github.com/iputils/iputils/releases/tag/20250602"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit"], "url": "https://github.com/Zephkek/ping-rtt-overflow/"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}], "source": "[email protected]", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2025:9421", "cpe": "cpe:/o:redhat:enterprise_linux:10.0", "package": "iputils-0:20240905-2.el10_0.1", "product_name": "Red Hat Enterprise Linux 10", "release_date": "2025-06-24T00:00:00Z"}, {"advisory": "RHSA-2025:9432", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "iputils-0:20210202-11.el9_6.1", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2025-06-24T00:00:00Z"}, {"advisory": "RHSA-2025:9432", "cpe": "cpe:/o:redhat:enterprise_linux:9", "package": "iputils-0:20210202-11.el9_6.1", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2025-06-24T00:00:00Z"}], "bugzilla": {"description": "iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping", "id": "2364090", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2364090"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "status": "verified"}, "cwe": "CWE-190", "details": ["ping in iputils through 20240905 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.", "A flaw was found in iputils ping, where a signed integer overflow occurs in timestamp multiplication. This issue could lead to incorrect timestamp calculations or denial of service when processing crafted ICMP Echo Reply packets."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2025-47268", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Fix deferred", "package_name": "iputils", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "iputils", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "iputils", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2025-05-05T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-47268\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-47268\nhttps://github.com/Zephkek/ping-rtt-overflow/\nhttps://github.com/iputils/iputils/issues/584"], "statement": "Within regulated environments, a combination of the following controls acts as a significant barrier to successfully exploiting a CWE-190: Integer Overflow or Wraparound vulnerability and therefore downgrades the severity of this particular CVE from Moderate to Low.\nBaseline configurations and configuration controls enforce secure system and software settings, while least functionality reduces the attack surface by disabling unnecessary services and ports. In the event of successful exploitation, process isolation ensures that memory corruption is contained within the originating process, preventing it from affecting other processes or the system as a whole. The environment leverages malicious code protections such as IPS/IDS and antimalware solutions. These controls help detect and prevent malicious code that attempts to exploit integer overflow vulnerabilities through mechanisms like file integrity checks and patch management. Finally, memory protection mechanisms such as Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) are used to enhance resilience against integer overflows and denial-of-service attacks.", "threat_severity": "Moderate"}