# CVE-2025-68615: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted…

Source: https://junglewise.ai/threats/cve-2025-68615-net-snmp-is-a-snmp-application-library-tools-and-daemon-prior-to  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-23  
License: CC BY 4.0 with a link back

CVE-2025-68615 · Severity: critical · CVSS 9.8 · Published 2025-12-23

net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.

Technologies: [Debian Linux](https://junglewise.ai/threats/technologies/debian). Vendors: [Debian](https://junglewise.ai/threats/vendors/debian).

## Quick answers

**Is CVE-2025-68615 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-68615 being exploited in the wild.

**How severe is CVE-2025-68615?** Critical severity, with a CVSS score of 9.8, published 23 December 2025.

**Which products and versions are affected?** Debian Linux, Net-SNMP. The advisory does not name versions.

**Is there a fix for CVE-2025-68615?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-68615?** Check whether you run Debian Linux or Net-SNMP. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Debian Linux
- Net-SNMP

## Related threats

- [Net-SNMP denial of service in SMUX module](https://junglewise.ai/threats/cve-2026-89147-net-snmp-denial-of-service-in-smux-module)
- [libpng use-after-free in chunk setter functions](https://junglewise.ai/threats/cve-2026-34757-libpng-use-after-free-in-chunk-setter-functions)
- [firewalld incorrect authorization in D-Bus setters](https://junglewise.ai/threats/cve-2026-4948-firewalld-incorrect-authorization-in-d-bus-setters)
- [libtiff signed integer overflow in putcontig8bitYCbCr44tile](https://junglewise.ai/threats/cve-2026-4775-libtiff-signed-integer-overflow-in-putcontig8bitycbcr44tile)
- [An incomplete fix for allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation c](https://junglewise.ai/threats/cve-2026-1940-an-incomplete-fix-for-allows-an-out-of-bounds-read-in-gst-wavparse)