CVE-2025-68615

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-68615
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68615.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-68615
Aliases
  • GHSA-4389-rwqf-q9gq
Downstream
ALPINE (1)
AZL (2)
BELL (1)
CLSA (4)
DEBIAN (1)
MGASA (1)
OESA (7)
openSUSE (2)
RHSA (13)
RLSA (3)
SUSE (9)
UBUNTU (1)
Related
ALSA (3)
openSUSE (2)
SUSE (9)
Published
2025-12-22T23:55:30Z
Modified
2026-10-21T02:30:27Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Net-SNMP snmptrapd crash
Details

net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-119"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68615.json"
}
References

Affected packages

Git / github.com/net-snmp/net-snmp

Affected ranges

Type
GIT
Repo
https://github.com/net-snmp/net-snmp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
95ce5af8b59ce02d458da818b4d71606d5b161f4
Introduced
202ea1c6c8b2b52b238cd60696d90d4c8e9e62c6
Last Affected
202ea1c6c8b2b52b238cd60696d90d4c8e9e62c6
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:net-snmp:net-snmp:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "5.9.5"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:net-snmp:net-snmp:5.10:pre1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "5.10-pre1"
                },
                {
                    "last_affected":  "5.10-pre1"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

5.*
5.10-pre1
v3.*
v3.0
v3.0.1
v3.0.2
v3.0.2.1
v3.0.3
v3.0.4
v3.0.5
v3.0.6
v3.0.7
v3.0.7.1
v3.0.7.2
v3.1
v3.1.0.1
v3.1.1
v3.1.2
v3.1.2.1
v3.1.3
v3.2
v3.3
v3.4
v3.5
v3.6
v3.6.1
v4.*
v4.0
v4.0.1
v4.1
v4.1.1
v4.2
v5.*
v5.0
v5.0.1
v5.0.11.1
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.1
v5.1.4.1
v5.10.pre1
v5.2
v5.3
v5.4
v5.5
v5.5.pre1
v5.5.pre2
v5.5.pre3
v5.5.rc1
v5.5.rc2
v5.5.rc3
v5.6
v5.6.pre1
v5.6.pre2
v5.6.pre3
v5.6.rc1
v5.6.rc2
v5.6.rc3
v5.7
v5.7.pre1
v5.7.pre2
v5.7.rc1
v5.7.rc2
v5.7.rc3
v5.8
v5.8.1.pre1
v5.8.1.pre2
v5.8.1.rc1
v5.8.pre1
v5.8.pre2
v5.8.pre3
v5.8.rc1
v5.8.rc2
v5.8.rc3
v5.8.rc4
v5.9
v5.9.1
v5.9.1.pre1
v5.9.1.rc1
v5.9.2
v5.9.2.pre1
v5.9.2.rc1
v5.9.2.rc2
v5.9.4
v5.9.4.pre2
v5.9.4.pre3
v5.9.4.rc1
v5.9.rc2
v5.9.verfix

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68615.json"