Critical Network Collapse: 9.8 Severity Net-SNMP Buffer Overflow Threatens Global Monitoring Systems

A critical vulnerability in Net-SNMP, tracked as CVE-2025-68615, carries a near-maximum CVSS score of 9.8 and threatens the snmptrapd daemon used for receiving SNMP trap messages. The flaw is a classic buffer overflow that can crash the daemon when it processes a specially crafted packet, with potential for broader impact if exploited. Net-SNMP remains a core building block for network monitoring and management across many organisations, and the vulnerability specifically affects the snmptrapd component.

The vulnerability was discovered by security researcher buddurid, working in coordination with the Trend Micro Zero Day Initiative (ZDI); administrators are urged to upgrade to Net-SNMP 5.9.5 or 5.10.pre2 to address the issue, and to ensure UDP port 162 is firewalled and accessible only from trusted internal IP addresses. If exposed to the internet, snmptrapd listeners are vulnerable to attack from anywhere, underscoring the need for immediate mitigations. The maintainers have issued patched versions, and users should apply them promptly.