6.9Media
CVE-2025-62875Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock
Descripción
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.
Debilidad (CWE):
CWE-754
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| opensmtpd | opensmtpd | 7.7.0 | |
| opensuse | tumbleweed | < 7.8.0p0-1.1 | |
| SUSE | openSUSE Tumbleweed | ? – < 7.8.0p0-1.1 |
Referencias y parches
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62875 Issue TrackingPatch
- https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html ExploitThird Party Advisory
- http://www.openwall.com/lists/oss-security/2025/10/31/3 ExploitMailing ListThird Party Advisory
- https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html#reproducer ExploitThird Party Advisory
Coincidencias CPE (NVD) (2)
cpe:2.3:a:opensmtpd:opensmtpd:7.7.0:p0:*:*:*:*:*:*cpe:2.3:a:opensuse:tumbleweed:*:*:*:*:*:*:*:*< 7.8.0p0-1.1