Skip to content
OpenAdvisories
High ALAS2-2026-3124 1 CVE

Important: net-snmp security update (Amazon Linux 2)

Published Jan 21, 2026 · Updated Jan 21, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-68615: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.

Fixed packages 10

ReleasePackageFixed in
Amazon Linux · 2 net-snmp 1:5.7.2-49.amzn2.1.3
Amazon Linux · 2 net-snmp-agent-libs 1:5.7.2-49.amzn2.1.3
Amazon Linux · 2 net-snmp-debuginfo 1:5.7.2-49.amzn2.1.3
Amazon Linux · 2 net-snmp-devel 1:5.7.2-49.amzn2.1.3
Amazon Linux · 2 net-snmp-gui 1:5.7.2-49.amzn2.1.3
Amazon Linux · 2 net-snmp-libs 1:5.7.2-49.amzn2.1.3
Amazon Linux · 2 net-snmp-perl 1:5.7.2-49.amzn2.1.3
Amazon Linux · 2 net-snmp-python 1:5.7.2-49.amzn2.1.3
Amazon Linux · 2 net-snmp-sysvinit 1:5.7.2-49.amzn2.1.3
Amazon Linux · 2 net-snmp-utils 1:5.7.2-49.amzn2.1.3

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-68615 EPSS 42%

    Net-SNMP snmptrapd crash

    net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and …

    net-snmp Net-SNMP net-snmp net-snmp Debian Ubuntu Azure Linux Alpine

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-68615.html