Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE Advisory 2025:02430-1 on Moderate Integer Overflow CVE-2025-48964

suse
Calendar Grey July 21, 2025
Dist Suse Esm H88
An updated security notice for iputils outlines a resolution for a buffer overflow vulnerability that could impact traceroute data integrity.
* bsc#1243772 Cross-References: * CVE-2025-48964

Summary

## This update for iputils fixes the following issues: * CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-2430=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-2430=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-2430=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-2430=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-2430=1 ## Package List:

Topics%20covered

Topics Covered

security advisory moderate integer overflow OpenSUSE iputils ping statistics

References

* bsc#1243772

Cross-

* CVE-2025-48964

CVSS scores:

* CVE-2025-48964 ( SUSE ): 5.3

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

* CVE-2025-48964 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected Products:

* Basesystem Module 15-SP6

* Basesystem Module 15-SP7

* openSUSE Leap 15.5

* openSUSE Leap 15.6

* SUSE Linux Enterprise Desktop 15 SP6

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Micro 5.5

* SUSE Linux Enterprise Real Time 15 SP6

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP6

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves one vulnerability can now be installed.

##

Announcement ID: SUSE-SU-2025:02430-1
Release Date: 2025-07-21T11:23:28Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate integer overflow OpenSUSE iputils ping statistics

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here