Skip to content
OpenAdvisories
High ELSA-2026-0926 1 CVE

Important: net-snmp security update (Oracle Linux 7)

Published Feb 3, 2026 · Updated Feb 3, 2026

Ecosystem: Oracle Linux

Summary

[1:5.7.2-49.0.3]
- Fix out of bound access [Orabug: 38873509][CVE-2025-68615]

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 net-snmp 1:5.7.2-49.0.3.el7_9.4
Oracle Linux · 7 net-snmp-agent-libs 1:5.7.2-49.0.3.el7_9.4
Oracle Linux · 7 net-snmp-devel 1:5.7.2-49.0.3.el7_9.4
Oracle Linux · 7 net-snmp-gui 1:5.7.2-49.0.3.el7_9.4
Oracle Linux · 7 net-snmp-libs 1:5.7.2-49.0.3.el7_9.4
Oracle Linux · 7 net-snmp-perl 1:5.7.2-49.0.3.el7_9.4
Oracle Linux · 7 net-snmp-python 1:5.7.2-49.0.3.el7_9.4
Oracle Linux · 7 net-snmp-sysvinit 1:5.7.2-49.0.3.el7_9.4
Oracle Linux · 7 net-snmp-utils 1:5.7.2-49.0.3.el7_9.4

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-68615 EPSS 42%

    Net-SNMP snmptrapd crash

    net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and …

    net-snmp Net-SNMP net-snmp net-snmp Debian Ubuntu Azure Linux Alpine