CVE-2025-61962: fetchmail-SA-2025-01: SMTP AUTH denial of service now called CVE-2025-61962.
Published Oct 4, 2025
·Updated
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.
Affected Software
1 affected component
Fetchmail Fetchmail<6.5.6
Event History
Oct 4, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-61962?
CVE-2025-61962 is classified as a high-severity vulnerability due to the potential for crash during SMTP client authentication.
2
How do I fix CVE-2025-61962?
To fix CVE-2025-61962, upgrade to Fetchmail version 6.5.6 or later.
3
What versions of Fetchmail are affected by CVE-2025-61962?
Fetchmail versions prior to 6.5.6 are affected by CVE-2025-61962.
4
What triggers the crash in CVE-2025-61962?
The crash in CVE-2025-61962 is triggered when the SMTP client receives a 334 status code in a malformed context during authentication.
5
Is CVE-2025-61962 related to email security?
Yes, CVE-2025-61962 impacts email security by potentially causing the SMTP client to crash, affecting email delivery.