VDB
CVE-2025-62875
CVE-2025-62875
PUBLISHED
CVSS 8.699999809265137 HIGH
OpenSMTPD ist ein freier Mail-Server, der im Rahmen des OpenBSD-Projekts entwickelt wurde.
EPSS 0.18% · 7.3th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.18%
7.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| OpenBSD | OpenBSD OpenSMTPD 7.7.0 | |
| SUSE | SUSE openSUSE |
Timeline
- Oct 31, 2025 PoC Published
- Oct 31, 2025 PoC Published
- Nov 2, 2025 CVE Published
- Nov 20, 2025 PoC Published
- Nov 20, 2025 CVE Updated
- Nov 21, 2025 EPSS Score
- Nov 26, 2025 EPSS Score
- Dec 1, 2025 EPSS Score
- Dec 6, 2025 EPSS Score
- Dec 11, 2025 EPSS Score
- Dec 15, 2025 EPSS Score
- Dec 20, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2464.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2464 advisory
- https://seclists.org/oss-sec/2025/q4/109 advisory
- https://www.tenable.com/plugins/nessus/272160 advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/K7VQPIUFZBFSBXJUNPWQZLOJZBK25A76/ advisory
- https://github.com/OpenSMTPD/OpenSMTPD/commit/653abf00f5283a2d3247eb9aabf8987d1b2f0510 fix