CVE-2025-68615: Debian Linux

Critical severity, CVSS 9.8. EPSS: 42.4% chance of exploitation in the next 30 days.

net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.

Affected products

• Debian Debian Linux: version 11.0 only
• Net-SNMP Net-SNMP: before 5.9.5 (fixed in 5.9.5); version 5.10 only

Published 2025-12-23. Last modified 2026-06-17.