6.9Orta
CVE-2025-62875Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock
Açıklama
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.
Zayıflık türü (CWE):
CWE-754
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| opensmtpd | opensmtpd | 7.7.0 | |
| opensuse | tumbleweed | < 7.8.0p0-1.1 | |
| SUSE | openSUSE Tumbleweed | ? – < 7.8.0p0-1.1 |
Kaynaklar ve yamalar
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62875 Issue TrackingPatch
- https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html ExploitThird Party Advisory
- http://www.openwall.com/lists/oss-security/2025/10/31/3 ExploitMailing ListThird Party Advisory
- https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html#reproducer ExploitThird Party Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:opensmtpd:opensmtpd:7.7.0:p0:*:*:*:*:*:*cpe:2.3:a:opensuse:tumbleweed:*:*:*:*:*:*:*:*< 7.8.0p0-1.1