6.9Medium
CVE-2025-62875Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock
Description
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.
Weakness (CWE):
CWE-754
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| opensmtpd | opensmtpd | 7.7.0 | |
| opensuse | tumbleweed | < 7.8.0p0-1.1 | |
| SUSE | openSUSE Tumbleweed | ? – < 7.8.0p0-1.1 |
References and patches
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62875 Issue TrackingPatch
- https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html ExploitThird Party Advisory
- http://www.openwall.com/lists/oss-security/2025/10/31/3 ExploitMailing ListThird Party Advisory
- https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html#reproducer ExploitThird Party Advisory
CPE matches (NVD) (2)
cpe:2.3:a:opensmtpd:opensmtpd:7.7.0:p0:*:*:*:*:*:*cpe:2.3:a:opensuse:tumbleweed:*:*:*:*:*:*:*:*< 7.8.0p0-1.1