CVE-2025-68615

Katalog CVE

CVSS 9.8 · Critical EPSS 42,4%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada net-snmp, debian linux. Skor CVSS 3.1 9.8 (Critical) menurut github.com.

Deskripsi (NVD)

net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.

Rincian

Terbit di NVD

23 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

42,4% peluang dieksploitasi; lebih tinggi dari 98,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/net-snmp/net-snmp/security/advisories/GHSA-4389-rwqf-q9gq advisory vendor
• https://lists.debian.org/debian-lts-announce/2026/01/msg00000.html mailing list · advisory vendor
• https://www.vicarius.io/vsociety/posts/cve-2025-68615-detection-script-buffer-overflow-vulnerability-affecting... exploit · mitigasi · advisory pihak ketiga
• https://www.vicarius.io/vsociety/posts/cve-2025-68615-mitigation-script-buffer-overflow-vulnerability-affectin... mitigasi · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2026/01/09/2 mailing list · advisory pihak ketiga