Alpine iputils CVE-2025-48964

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 23:11 vuln.today

DescriptionCVE.org

Alpine Linux: iputils fixed in 20250602-r0

AnalysisAI

iputils on Alpine Linux has been patched in version 20250602-r0, addressing an unspecified vulnerability in the network utilities package. The exact nature of the flaw - whether it affects ping, tracepath, arping, clockdiff, or another component - is not disclosed in the available intelligence. No active exploitation has been identified at time of analysis, and no CVSS scoring has been published.

Technical ContextAI

iputils is a collection of foundational network utilities for Linux systems, including ping (ICMP echo), arping (ARP-level host discovery), tracepath (UDP/ICMP route tracing), and clockdiff (ICMP timestamp-based clock comparison). Several of these tools historically operate with elevated privileges (setuid root or CAP_NET_RAW) to send raw ICMP packets, making them a historically sensitive attack surface. The affected platform is Alpine Linux, a security-oriented, musl libc-based minimal Linux distribution widely used in container images. The fix is identified only by the Alpine package version 20250602-r0; no upstream iputils version, CWE classification, or specific vulnerable component is disclosed in the available data.

Affected ProductsAI

Alpine Linux systems running iputils prior to version 20250602-r0 are affected. The specific upstream iputils release version corresponding to this fix is not identified in the available data. No CPE string has been provided. The vulnerability is confirmed by the Alpine Linux vendor (vendor:alpine) and is resolved in the Alpine package iputils-20250602-r0. Other Linux distributions shipping their own iputils packages (Debian, Ubuntu, RHEL, Arch) may or may not be affected depending on whether the underlying upstream iputils code carries the same flaw - this cannot be determined from available data.

RemediationAI

Update the iputils package on Alpine Linux to version 20250602-r0 or later using the standard Alpine package manager: 'apk update && apk upgrade iputils'. This is the vendor-released patch confirmed by Alpine Linux. For container images based on Alpine, rebuild or repull base images that include the patched iputils. If immediate patching is not possible and the specific vulnerable component were identified as ping or arping, a compensating control would be to remove the setuid bit or CAP_NET_RAW capability from those binaries ('chmod u-s /bin/ping'), though this will break legitimate use of ICMP-based diagnostics for non-root users. No further workaround detail is possible given the absence of technical specifics in the available data. No upstream advisory URL has been provided.