9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.
AI Analysis
Buffer overflow in snmptrapd daemon due to specially crafted packet
Basic Information
ID
CVE-2025-68615
Source
GitHub_M
Published
Dec 22, 2025 at 23:55
Affected Product
Vendor
net-snmp
Product
net-snmp
Version
< 5.9.5
Affected Versions
net-snmp net-snmp < 5.9.5
net-snmp net-snmp >= 5.10.pre1, < 5.10.pre2
net-snmp net-snmp >= 5.10.pre1, < 5.10.pre2
CWE Classification
AI Assessment
AI Score
9.8 / 10
AI Severity
Critical
Vendor
Net-SNMP
Product
net-snmp
Version
< 5.9.5, >= 5.10.pre1, < 5.10.pre2