CVE-2025-61962
- Source
- https://cve.org/CVERecord?id=CVE-2025-61962
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61962.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-61962
- Downstream
DEBIAN (1)
MGASA (1)
openSUSE (2)
UBUNTU (1)
- Related
- Published
- 2025-10-04T00:00:00Z
- Modified
- 2026-10-28T02:54:39Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.
- Database specific
{ "cna_assigner": "mitre", "cwe_ids": [ "CWE-142" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61962.json" }- References
-
- http://www.openwall.com/lists/oss-security/2025/10/04/3
- https://www.fetchmail.info/fetchmail-SA-2025-01.txt
- https://www.openwall.com/lists/oss-security/2025/10/03/2
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61962.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-61962
- https://gitlab.com/fetchmail/fetchmail/-/commit/4c3cebfa4e659fb778ca2cae0ccb3f69201609a8
Affected packages
Git / gitlab.com/fetchmail/fetchmail
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.com/fetchmail/fetchmail
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "5.9.9" }, { "fixed": "6.5.6" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "fixed": "4c3cebfa4e659fb778ca2cae0ccb3f69201609a8" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
6.*
6.5.0
6.5.0.beta1
6.5.0.beta10
6.5.0.beta2
6.5.0.beta3
6.5.0.beta4
6.5.0.beta5
6.5.0.beta6
6.5.0.beta7
6.5.0.beta8
6.5.0.beta9
6.5.0.dev20200711a
6.5.0.dev20200711b
6.5.0.rc1
6.5.0.rc2
6.5.1
6.5.1.rc1
6.5.2
6.5.3
6.5.4
6.5.5
6.5.5.rc1
Other
BRANCH_6-3
RELEASE_5-9-10
RELEASE_5-9-11
RELEASE_5-9-12
RELEASE_5-9-13
RELEASE_5-9-14
RELEASE_5-9-9
RELEASE_6-0-0
RELEASE_6-1-0
RELEASE_6-1-1
RELEASE_6-1-2
RELEASE_6-1-3
RELEASE_6-2-0
RELEASE_6-2-1
RELEASE_6-2-2
RELEASE_6-2-3
RELEASE_6-2-4
RELEASE_6-2-5
RELEASE_6-3-0
RELEASE_6-3-1
RELEASE_6-3-10
RELEASE_6-3-11
RELEASE_6-3-12
RELEASE_6-3-13
RELEASE_6-3-14
RELEASE_6-3-15
RELEASE_6-3-16
RELEASE_6-3-17
RELEASE_6-3-18
RELEASE_6-3-19
RELEASE_6-3-2
RELEASE_6-3-20
RELEASE_6-3-21
RELEASE_6-3-22
RELEASE_6-3-23
RELEASE_6-3-24
RELEASE_6-3-25
RELEASE_6-3-26
RELEASE_6-3-2_4678
RELEASE_6-3-3
RELEASE_6-3-4
RELEASE_6-3-5
RELEASE_6-3-6
RELEASE_6-3-7
RELEASE_6-3-8
RELEASE_6-3-8_5093
RELEASE_6-3-9
RELEASE_6-3-9_5248
SNAPSHOT-6-5-0-beta2
SNAPSHOT-6_2_6-pre5
SNAPSHOT-6_2_6-pre6
SNAPSHOT-6_2_6-pre7
SNAPSHOT-6_2_6-pre8
SNAPSHOT-6_2_6-pre9
SNAPSHOT-6_2_9-rc1
SNAPSHOT-6_2_9-rc10
SNAPSHOT-6_2_9-rc2
SNAPSHOT-6_2_9-rc3
SNAPSHOT-6_2_9-rc4
SNAPSHOT-6_2_9-rc5
SNAPSHOT-6_2_9-rc6
SNAPSHOT-6_2_9-rc7
SNAPSHOT-6_2_9-rc8
SNAPSHOT-6_2_9-rc9
SNAPSHOT-6_4_0_beta2
SNAPSHOT-6_4_0_beta3
SNAPSHOT-6_4_0_beta4
SNAPSHOT-6_4_0_beta5
SNAPSHOT-6_4_0_rc1
SNAPSHOT-6_4_0_rc2
SNAPSHOT-6_4_0_rc3
SNAPSHOT_6-2-6-pre3
SNAPSHOT_6-2-6-pre4
SNAPSHOT_6-3-1-rc1
SNAPSHOT_6-3-10-beta1
SNAPSHOT_6-3-15-beta1
SNAPSHOT_6-3-15-beta2
SNAPSHOT_6-3-15-beta3
SNAPSHOT_6-3-17-pre1
SNAPSHOT_6-3-18-pre1
SNAPSHOT_6-3-18-pre2
SNAPSHOT_6-3-19-pre1
SNAPSHOT_6-3-2-rc1
SNAPSHOT_6-3-2-rc2
SNAPSHOT_6-3-2-rc3
SNAPSHOT_6-3-2-rc4
SNAPSHOT_6-3-20-pre1
SNAPSHOT_6-3-20-rc2
SNAPSHOT_6-3-20-rc3
SNAPSHOT_6-3-3-rc1
SNAPSHOT_6-3-3-rc2
SNAPSHOT_6-3-4-rc1
SNAPSHOT_6-3-4-rc2
SNAPSHOT_6-3-5-beta1
SNAPSHOT_6-3-5-beta2
SNAPSHOT_6-3-5-beta3
SNAPSHOT_6-3-6-rc1
SNAPSHOT_6-3-6-rc2
SNAPSHOT_6-3-6-rc3
SNAPSHOT_6-3-6-rc4
SNAPSHOT_6-3-6-rc5
SNAPSHOT_6-3-7-rc1
SNAPSHOT_6-3-8-rc1
SNAPSHOT_6-3-8-rc2
SNAPSHOT_6-3-8-rc3
SNAPSHOT_6-3-9-rc1
SNAPSHOT_6-3-9-rc2
SNAPSHOT_6-3-9-rc3
SNAPSHOT_6-5-0-beta1
SNAPSHOT_6-5-0-beta3
SNAPSHOT_6-5-0-beta4
SNAPSHOT_6-5-0-beta5
SNAPSHOT_6-5-0-beta6
badmerge
before-automake