Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68615: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | net-snmp | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-agent-libs | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-agent-libs-debuginfo | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-debuginfo | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-debugsource | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-devel | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-gui | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-libs | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-libs-debuginfo | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-perl | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-perl-debuginfo | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-utils | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | net-snmp-utils-debuginfo | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | python3-net-snmp | 1:5.9.3-2.amzn2023.0.4 |
| Amazon Linux · 2023 | python3-net-snmp-debuginfo | 1:5.9.3-2.amzn2023.0.4 |
Vulnerabilities 1
-
Critical 9.8CVE-2025-68615 EPSS 42%
Net-SNMP snmptrapd crash
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-68615.html