CVE-2025-68615

net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.

Affected products

Debian, Linuxmint, Red Os, Rocky Linux, Ubuntu, Net-Snmp

Net-snmp

< 5.9.5, 5.10

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

42.8% (99th percentile)

Weakness

CWE-119

NVD status

Analyzed

Published

2025-12-22