Critical Net-SNMP Flaw CVE-2025-68615 Allows Remote Buffer Overflow and Service Crashes

A critical vulnerability in the Net-SNMP software, CVE-2025-68615, affects its snmptrapd component and can lead to crashes or remote code execution. Organizations should urgently update to version 5.9.5 or later and ensure proper network segmentation to mitigate risks. #NetSNMP #CVE202568615

Keypoints

The vulnerability CVE-2025-68615 is a buffer overflow affecting the snmptrapd daemon in Net-SNMP.
An attacker can exploit this flaw by sending crafted SNMP trap packets to cause a denial of service or code execution.
The flaw has a high CVSS score of 9.8, indicating critical severity and significant security implications.
All versions of Net-SNMP are affected, with fixes available in versions 5.9.5 and 5.10.pre2.
Organizations are advised to upgrade immediately and implement strict network controls to prevent exploitation.