CVE-2025-62875: OpenSMTPD

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.

Affected products

• OpenSMTPD OpenSMTPD: version 7.7.0 only
• Opensuse Tumbleweed: before 7.8.0p0-1.1 (fixed in 7.8.0p0-1.1)

Published 2025-11-20. Last modified 2026-06-17.