CVE-2025-62875CWE-754

CVE-2025-62875

Medium · published November 20, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD.

This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2025-11-20T21:16Z
Affected products (2)
ProductVersionsFixed in
opensmtpd/opensmtpdall versions—
opensuse/tumbleweed< 7.8.0p0-1.17.8.0p0-1.1
References (4)
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62875 · [email protected]https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html · [email protected]http://www.openwall.com/lists/oss-security/2025/10/31/3 · af854a3a-2127-422b-91ae-364da2661108https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html#reproducer · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 20 NOV 16:02Z
    Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock
    cvelistv5