In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.
[
{
"signature_version": "v1",
"source": "https://gitlab.com/fetchmail/fetchmail@4c3cebfa4e659fb778ca2cae0ccb3f69201609a8",
"deprecated": false,
"id": "CVE-2025-61962-a302b2e4",
"target": {
"function": "SMTP_auth",
"file": "smtp.c"
},
"digest": {
"function_hash": "72355136985886001851827610807957893427",
"length": 4077.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://gitlab.com/fetchmail/fetchmail@4c3cebfa4e659fb778ca2cae0ccb3f69201609a8",
"deprecated": false,
"id": "CVE-2025-61962-e965a5d6",
"target": {
"file": "smtp.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"4513686375981488362404074323313890909",
"105667422805144289163813776184598395838",
"54599167501396829001133377000538514605",
"234189643550913644802812752486961244004",
"4513686375981488362404074323313890909",
"105667422805144289163813776184598395838",
"54599167501396829001133377000538514605",
"234189643550913644802812752486961244004"
]
},
"signature_type": "Line"
}
]