CVE-2025-62875

MEDIUM 5.5CVE-2025-62875 · Published 20/11/2025 · updated 18/10/2026

Package	Affected versions	Patched versions
opensmtpd opensmtpd	`= 7.7.0`	No fix yet
tumbleweed opensuse	`< 7.8.0p0-1.1`	`7.8.0p0-1.1`

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.

References

bugzilla.suse.com/show_bug.cgi · Issue Tracking
security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html · Exploit
openwall.com/lists/oss-security/2025/10/31/3 · Exploit
security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free