CVE-2025-68615 @ mufasa

"CVE-2025-68615"
"net-snmp-5.7.2-49.el7_9.4"
"net-snmp-agent-libs-5.7.2-49.el7_9.4"
"net-snmp-libs-5.7.2-49.el7_9.4"
"alt-net-snmp11-libs-5.9.5.2-1.el7"
"Am I vulnerable?"

Status

new

Priority

9.8

Match score

4.0

Risk

MemCorrupt DoS Remote priv:user

CVSS

9.8 CRITICAL

Reason

cpe: net-snmp; pkgs: net-snmp, net-snmp-agent-libs, net-snmp-libs; version: in-range: net-snmp-5.7.2-49.el7_9.4, net-snmp-agent-libs-5.7.2-49.el7_9.4, net-snmp-libs-5.7.2-49.el7_9.4; risk:memory_corruption

Created

2026-10-20T10:16:50Z

Updated

2026-10-20T10:16:50Z

Package interrogation (copy)

Run on the host — click to copy a command. RPM

Package	Commands
net-snmp-5.7.2-49.el7_9.4
net-snmp-agent-libs-5.7.2-49.el7_9.4
net-snmp-libs-5.7.2-49.el7_9.4
alt-net-snmp11-libs-5.9.5.2-1.el7

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Suggestions: net-snmp · net-snmp-agent-libs · net-snmp-libs

System	Matches	Ticket for CVE-2025-68615
morris	net-snmp-agent-libs 5.7.2	new open
mufasa	net-snmp-agent-libs 5.7.2	new open

Related CVE (same fix)

Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.

Host OS / kernel

CloudLinux release 7.9 (Boris Yegorov) (7.9) · cloudlinux

Arch

x86_64

kernel_release

uname -r → 3.10.0-962.3.2.lve1.5.89.el7.x86_64

kernel_version

uname -v → #1 SMP Thu Jul 9 15:55:31 UTC 2026

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Same CVE on other hosts

Open the ticket for this CVE on another system.

System	Status	Priority	Updated
morris	new	9.8	2026-10-20T10:16:50Z	Open

Description

net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.

Update status

Add note only

References

NVD: CVE-2025-68615