Moderate Vulnerability in iputils: Integer Overflow Issue
Summary
RLSA-2026:18162: Moderate: iputils security update. Affects iputils versions < 0:20240905-5.el10. Fixed in 0:20240905-5.el10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iputils package provides essential utilities for network monitoring, including the widely used ping command. It is a fundamental tool for diagnosing network connectivity issues and is commonly utilized in various Linux distributions, including Rocky Linux. The package's functionality is critical for system administrators and users who rely on network diagnostics.
Vulnerability Detail
The vulnerability identified as CVE-2025-48964 is an integer overflow issue within the iputils package. This flaw can potentially allow an attacker to exploit the overflow, leading to unexpected behavior or crashes in the application. The severity of this vulnerability is classified as moderate, with a CVSS score of 5.3, indicating that while it may not be critical, it still poses a risk that should be addressed promptly.
How To Fix
Minimum fixed version
0:20240905-5.el10
This is the first release that contains the fix.
sudo dnf update iputilsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate any risks associated with the integer overflow issue.
Conclusion
The iputils package has a moderate vulnerability due to an integer overflow issue, which can lead to unexpected behavior. Users are advised to update to the patched version to mitigate risks. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for iputils →
FAQ
The vulnerability is an integer overflow issue that can lead to unexpected behavior or crashes in the iputils package.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of this vulnerability is 5.3, indicating a moderate level of severity.
You should update the iputils package to the fixed version 0:20240905-5.el10 using the command 'sudo yum update iputils'.
Currently, there are no specific workarounds available. It is recommended to apply the patch as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for iputils.
