CVE-2025-68615

A flaw was found in net-snmp. A remote attacker can trigger a buffer overflow in the snmptrapd daemon by sending a specially crafted SNMP packet, causing the daemon to crash and resulting in a denial of service.

This issue allows a remote and unauthenticated attacker to trigger a buffer overflow in the snmptrapd daemon by sending a specially crafted SNMP packet, causing it to crash, and resulting in a denial of service.

However, as this is a buffer overflow issue, it can also cause memory corruption and the possibility of arbitrary code execution is not discarded.

Note that SNMP ports are not recommended to be open to public networks, limiting the exposure of this issue.

Additionally, default Red Hat Enterprise Linux security features such as SELinux enforcement, Address Space Layout Randomization (ASLR) and memory protections reduce the possibility of exploitation.

Due to these reasons, this flaw has been rated with an important severity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Make sure to restrict network traffic to the snmptrapd daemon using firewall rules to allow connections only from known and trusted users and that SNMP ports are not open to public networks. This will limit the exposure of this issue and reduce the likelihood of exploitation.