ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02431-1 advisory.

    - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:02432-1 advisory.

    - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02430-1 advisory.

    - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
242521	SUSE SLES15 Security Update : iputils (SUSE-SU-2025:02431-1)	Nessus	SuSE Local Security Checks	medium
242517	SUSE SLES12 Security Update : iputils (SUSE-SU-2025:02432-1)	Nessus	SuSE Local Security Checks	medium
242501	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : iputils (SUSE-SU-2025:02430-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2025-48964

medium

Tenable Plugins

medium

medium

medium