CVE-2025-61962

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-61962

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61962.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-61962

Downstream

AZL (2)

DEBIAN (1)

DEBIAN-CVE-2025-61962

MGASA (1)

MGASA-2025-0238

OESA (6)

openSUSE (2)

SUSE (3)

UBUNTU (1)

UBUNTU-CVE-2025-61962

USN-7838-1

Related

openSUSE (2)

SUSE (3)

Published

2025-10-04T00:00:00Z

Modified

2026-08-12T03:51:46Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.

Database specific

{
    "cna_assigner":  "mitre",
    "cwe_ids":  [
        "CWE-142"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61962.json"
}

References

Affected packages

Git / gitlab.com/fetchmail/fetchmail

Affected ranges

Type

GIT

Repo

https://gitlab.com/fetchmail/fetchmail

Events

Introduced

45f7b08b6abff402a2feaadbdda4ff33155ef6ef

Fixed

89bf3b812858f50c39292c598fce59e671ac5f00

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "5.9.9"
        },
        {
            "fixed":  "6.5.6"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

6.*

6.5.0

6.5.0.beta1

6.5.0.beta10

6.5.0.beta2

6.5.0.beta3

6.5.0.beta4

6.5.0.beta5

6.5.0.beta6

6.5.0.beta7

6.5.0.beta8

6.5.0.beta9

6.5.0.dev20200711a

6.5.0.dev20200711b

6.5.0.rc1

6.5.0.rc2

6.5.1

6.5.1.rc1

6.5.2

6.5.3

6.5.4

6.5.5

6.5.5.rc1

Other

BRANCH_6-3

RELEASE_5-9-10

RELEASE_5-9-11

RELEASE_5-9-12

RELEASE_5-9-13

RELEASE_5-9-14

RELEASE_5-9-9

RELEASE_6-0-0

RELEASE_6-1-0

RELEASE_6-1-1

RELEASE_6-1-2

RELEASE_6-1-3

RELEASE_6-2-0

RELEASE_6-2-1

RELEASE_6-2-2

RELEASE_6-2-3

RELEASE_6-2-4

RELEASE_6-2-5

RELEASE_6-3-0

RELEASE_6-3-1

RELEASE_6-3-10

RELEASE_6-3-11

RELEASE_6-3-12

RELEASE_6-3-13

RELEASE_6-3-14

RELEASE_6-3-15

RELEASE_6-3-16

RELEASE_6-3-17

RELEASE_6-3-18

RELEASE_6-3-19

RELEASE_6-3-2

RELEASE_6-3-20

RELEASE_6-3-21

RELEASE_6-3-22

RELEASE_6-3-23

RELEASE_6-3-24

RELEASE_6-3-25

RELEASE_6-3-26

RELEASE_6-3-2_4678

RELEASE_6-3-3

RELEASE_6-3-4

RELEASE_6-3-5

RELEASE_6-3-6

RELEASE_6-3-7

RELEASE_6-3-8

RELEASE_6-3-8_5093

RELEASE_6-3-9

RELEASE_6-3-9_5248

SNAPSHOT-6-5-0-beta2

SNAPSHOT-6_2_6-pre5

SNAPSHOT-6_2_6-pre6

SNAPSHOT-6_2_6-pre7

SNAPSHOT-6_2_6-pre8

SNAPSHOT-6_2_6-pre9

SNAPSHOT-6_2_9-rc1

SNAPSHOT-6_2_9-rc10

SNAPSHOT-6_2_9-rc2

SNAPSHOT-6_2_9-rc3

SNAPSHOT-6_2_9-rc4

SNAPSHOT-6_2_9-rc5

SNAPSHOT-6_2_9-rc6

SNAPSHOT-6_2_9-rc7

SNAPSHOT-6_2_9-rc8

SNAPSHOT-6_2_9-rc9

SNAPSHOT-6_4_0_beta2

SNAPSHOT-6_4_0_beta3

SNAPSHOT-6_4_0_beta4

SNAPSHOT-6_4_0_beta5

SNAPSHOT-6_4_0_rc1

SNAPSHOT-6_4_0_rc2

SNAPSHOT-6_4_0_rc3

SNAPSHOT_6-2-6-pre3

SNAPSHOT_6-2-6-pre4

SNAPSHOT_6-3-1-rc1

SNAPSHOT_6-3-10-beta1

SNAPSHOT_6-3-15-beta1

SNAPSHOT_6-3-15-beta2

SNAPSHOT_6-3-15-beta3

SNAPSHOT_6-3-17-pre1

SNAPSHOT_6-3-18-pre1

SNAPSHOT_6-3-18-pre2

SNAPSHOT_6-3-19-pre1

SNAPSHOT_6-3-2-rc1

SNAPSHOT_6-3-2-rc2

SNAPSHOT_6-3-2-rc3

SNAPSHOT_6-3-2-rc4

SNAPSHOT_6-3-20-pre1

SNAPSHOT_6-3-20-rc2

SNAPSHOT_6-3-20-rc3

SNAPSHOT_6-3-3-rc1

SNAPSHOT_6-3-3-rc2

SNAPSHOT_6-3-4-rc1

SNAPSHOT_6-3-4-rc2

SNAPSHOT_6-3-5-beta1

SNAPSHOT_6-3-5-beta2

SNAPSHOT_6-3-5-beta3

SNAPSHOT_6-3-6-rc1

SNAPSHOT_6-3-6-rc2

SNAPSHOT_6-3-6-rc3

SNAPSHOT_6-3-6-rc4

SNAPSHOT_6-3-6-rc5

SNAPSHOT_6-3-7-rc1

SNAPSHOT_6-3-8-rc1

SNAPSHOT_6-3-8-rc2

SNAPSHOT_6-3-8-rc3

SNAPSHOT_6-3-9-rc1

SNAPSHOT_6-3-9-rc2

SNAPSHOT_6-3-9-rc3

SNAPSHOT_6-5-0-beta1

SNAPSHOT_6-5-0-beta3

SNAPSHOT_6-5-0-beta4

SNAPSHOT_6-5-0-beta5

SNAPSHOT_6-5-0-beta6

badmerge

before-automake

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61962.json"