Summary
The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.
Security Fix(es):
* net-snmp: buffer overflow via a specially crafted packet can cause a crash in snmptrapd (CVE-2025-68615)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | net-snmp | 1:5.8-33.el8_10 |
| AlmaLinux · 8 | net-snmp-agent-libs | 1:5.8-33.el8_10 |
| AlmaLinux · 8 | net-snmp-devel | 1:5.8-33.el8_10 |
| AlmaLinux · 8 | net-snmp-libs | 1:5.8-33.el8_10 |
| AlmaLinux · 8 | net-snmp-perl | 1:5.8-33.el8_10 |
| AlmaLinux · 8 | net-snmp-utils | 1:5.8-33.el8_10 |
Vulnerabilities 1
-
Critical 9.8CVE-2025-68615 EPSS 42%
Net-SNMP snmptrapd crash
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and …