CVE-2025-62875

An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPDallows local users to crashOpenSMTPD.




This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
UNKNOWN
---
suseCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Debian logo
Debian Releases
Debian Product
Codename
opensmtpd
bullseye
postponed
trixie
no-dsa
bookworm
no-dsa
forky
7.8.0p0-2
fixed
sid
7.8.0p0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
opensmtpd
questing
needs-triage
plucky
needs-triage
noble
needs-triage
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
trusty
needs-triage
Common Weakness Enumeration
References
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62875
https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html
http://www.openwall.com/lists/oss-security/2025/10/31/3
https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html#reproducer