Description
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.
References (6)
Core 6
Core References
Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1242300
Exploit, Issue Tracking, Patch
https://github.com/iputils/iputils/issues/584
Exploit, Issue Tracking, Patch
https://github.com/iputils/iputils/pull/585
Release Notes
https://github.com/iputils/iputils/releases/tag/20250602
Scores
CVSS v3
6.5
EPSS
0.0051
EPSS Percentile
66.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-190
Status
published
Products (2)
iputils/iputils
< 20250602
iputils_project/iputils
20240905
Published
May 05, 2025
Tracked Since
Feb 18, 2026