CVE-2025-68615

62

FAUCET Score

CVE-2025-68615 describes a critical buffer overflow vulnerability in net-snmp, affecting versions prior to 5.9.5 and 5.10.pre2, including those used in Debian Linux and IBM QRadar SIEM. A specially crafted packet sent to the snmptrapd daemon can cause a denial of service and potentially lead to arbitrary code execution. This vulnerability carries a CVSS score of 9.8 (CRITICAL) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 13 mentions, indicating awareness and potential interest.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 5.9.5CPE matchmatch criteria	cpe:2.3:a:net-snmp:net-snmp::::::::
		5.10CPE matchmatch criteria	cpe:2.3:a:net-snmp:net-snmp:5.10:pre1::::::
		11.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:11.0:::::::*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

43.26%

Probability of exploitation in next 30 days

EPSS Percentile

98.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-26

Model: v2026.06.15

This CVE's current EPSS score of 0.4326 is in the 96th percentile among its peer group of 36,835 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (25)

microsoftpatch availablevia msrc

Product: azl3 net-snmp 5.9.4-1 on Azure Linux 3.0Fixed in: 5.9.5.2-1

microsoftpatch availablevia msrc

Product: cbl2 net-snmp 5.9.4-1 on CBL Mariner 2.0Fixed in: 5.9.5.2-1

microsoftpatch availablevia msrc

Product: 18558-17084Fixed in: 5.9.5.2-1

microsoftpatch availablevia msrc

Product: 18557-17086Fixed in: 5.9.5.2-1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: net-snmp-1:5.8-33.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: net-snmp-1:5.8-14.el8_2.6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: net-snmp-1:5.8-20.el8_4.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: net-snmp-1:5.8-20.el8_4.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: net-snmp-1:5.8-25.el8_6.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: net-snmp-1:5.8-25.el8_6.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: net-snmp-1:5.8-25.el8_6.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: net-snmp-1:5.8-27.el8_8.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: net-snmp-1:5.9.1-17.el9_7.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: net-snmp-1:5.9.1-7.el9_0.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: net-snmp-1:5.9.1-11.el9_2.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: net-snmp-1:5.9.1-13.el9_4.4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.6 Extended Update SupportFixed in: net-snmp-1:5.9.1-17.el9_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: net-snmp-1:5.8-27.el8_8.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 10Fixed in: net-snmp-1:5.9.4-15.el10_1.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 10.0 Extended Update SupportFixed in: net-snmp-1:5.9.4-15.el10_0.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: net-snmp-1:5.7.2-49.el7_9.5

debianvendor investigatingvia nvd_reference

github_advisoryvendor investigatingvia nvd_reference

redhatno patchvia redhat_api

Product: Red Hat OpenShift Container Platform 4Fixed in: rhcos

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: net-snmp

Vendor Advisories (2)

redhatCVE-2025-68615Important

net-snmp: buffer overflow via a specially crafted packet can cause a crash in snmptrapd

microsoft2025-Dec/CVE-2025-68615Critical

Net-SNMP snmptrapd crash

References

lists.debian.org / debian-lts-announce/2026/01/msg00000.html

Mailing ListVendor Advisory

vicarius.io / vsociety/posts/cve-2025-68615-detection-script-buffer-overflow-vulnerability-affecting-net-snmp

ExploitMitigationThird Party Advisory

vicarius.io / vsociety/posts/cve-2025-68615-mitigation-script-buffer-overflow-vulnerability-affecting-net-snmp

MitigationThird Party Advisory

openwall.com / lists/oss-security/2026/01/09/2

Mailing ListThird Party Advisory

github.com / net-snmp/net-snmp/security/advisories/GHSA-4389-rwqf-q9gq

Vendor Advisory