November 14, 2026

CVE Watchtower

CVE-2025-68615Net-snmp Net-snmp Improper Restriction of Operations within the Bounds of a Memory Buffer

NVDCVSS scored by security-advisories@github.com

Vulnerability Summary

net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.
Severity Level
CRITICAL(9.8)
Published Date
Dec 23, 2025
Last Modified
Oct 19, 2026
Exploitation Status
Public exploit available
EPSS Score (30-Day)
42.36%Probability
Root Weakness (CWE)
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer β†—
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the intended boundary of the buffer.
CVSS v3.1 Base Metrics — Score 9.8 (CRITICAL)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

Affected & Patched Versions

Affected Versions
  • Net-snmp Net-snmp < 5.9.5
  • Net-snmp Net-snmp
  • Debian Debian Linux
Patched Versions
  • Net-snmp Net-snmp 5.9.5

What to do

Prioritize this fix. Exploit code is public, so attacks can follow quickly.

  1. Check whether you run Net-snmp Net-snmp and which version.
  2. Update to a patched version listed above, then confirm the new version.
  3. Review logs and exposed services for signs of earlier compromise.

Timeline

  • Dec 23, 2025Published
  • Oct 19, 2026Record last modified

Score, severity and exploitation changes are tracked from the day Watchtower started logging them.

Get notified about new Net-snmp Net-snmp CVEsYou are reading CVE-2025-68615. Get an email when KEV listings, exploits or new CVEs match your stack.
Set up CVE alerts

Related Coverage

External References

Data last checked: Nov 14, 2026 21:37 UTC