CVE-2025-68615criticalCWE-119

CVE-2025-68615: critical vulnerability in net-snmp

Net-SNMP snmptrapd crash

Published · Updated

Follow this CVE+ Monitor net-snmp+ Monitor net-snmp

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

40Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 42%
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
net-snmp · net-snmp
Related CVEs — net-snmp

In the same product, most dangerous first.

CVE-2022-24805MEDIUMnet-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.EPSS 1.3%CVE-2022-24810MEDIUMnet-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.EPSS 1.2%CVE-2022-24808MEDIUMnet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferenceEPSS 1.1%CVE-2022-24809MEDIUMnet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferenceEPSS 1.1%CVE-2022-24806MEDIUMnet-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneouslyEPSS 1.1%CVE-2022-24807MEDIUMnet-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory accessEPSS 1.0%