Moderate Vulnerability in iputils: Signed Integer Overflow in Timestamp Multiplication
Summary
ALSA-2025:9432: Moderate: iputils security update. Affects iputils versions < 20210202-11.el9_6.1. Fixed in 20210202-11.el9_6.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iputils package provides essential utilities for network monitoring, including the widely used ping command. It is a crucial tool for diagnosing network connectivity issues and ensuring the reliability of network services. However, a security flaw has been identified that could potentially compromise the integrity of the iputils package, specifically affecting its functionality in certain scenarios.
Vulnerability Detail
The vulnerability, identified as CVE-2025-47268, is a signed integer overflow in the timestamp multiplication feature of the iputils ping utility. This flaw can lead to unexpected behavior, including potential denial of service or arbitrary code execution, depending on how the affected functions are utilized. Attackers could exploit this vulnerability to manipulate network monitoring processes, leading to significant security risks.
How To Fix
Minimum fixed version
20210202-11.el9_6.1
This is the first release that contains the fix.
sudo dnf update iputilsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it is available to ensure the security of the system.
Conclusion
The iputils package has a moderate vulnerability that requires immediate attention to prevent potential exploitation. Users are advised to update to the latest patched version to secure their systems. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the integrity and security of your software.
See every vulnerability recorded for iputils →
FAQ
CVE-2025-47268 is a vulnerability in the iputils package that involves a signed integer overflow in the timestamp multiplication feature of the ping utility.
The vulnerability could lead to denial of service or arbitrary code execution, allowing attackers to manipulate network monitoring processes.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no specific workarounds available, it is crucial to prioritize updating the package to mitigate the risk as soon as possible.
For more details, refer to the CVE page associated with CVE-2025-47268, which provides in-depth information about the vulnerability and its implications.
Related vulnerabilities
Recent vulnerabilities recorded for iputils.
