Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-62875 EUVD-2025-198303GHSA-px28-qwg7-83x2

Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock

Published Nov 20, 2025 · Updated Nov 21, 2025 · Assigned by suse

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD.

This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.

Affected products

VendorProductAffectedFixed
SUSE openSUSE Tumbleweed ? – < 7.8.0p0-1.1 7.8.0p0-1.1

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 opensmtpd 7.8.0p0-1 —
Debian 13 opensmtpd No fix yet —
Debian 12 opensmtpd No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 opensmtpd No fix yet —
Ubuntu 26.04 LTS opensmtpd No fix yet —
Ubuntu 25.10 opensmtpd No fix yet —
Ubuntu 24.04 LTS opensmtpd No fix yet —
Ubuntu 22.04 LTS opensmtpd No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS opensmtpd No fix yet —
Ubuntu 18.04 LTS opensmtpd No fix yet —
Ubuntu Pro 16.04 LTS opensmtpd No fix yet —
Ubuntu Pro 14.04 LTS opensmtpd No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed OpenSMTPD 7.8.0p0-1.1 openSUSE-SU-2025:15700-1

Advisories 2

References