BaseFortify

Publication date: 2025-10-04

Last updated on: 2025-11-04

Assigner: MITRE

Description

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-04

Last Modified

2025-11-04

Generated

2026-07-06

AI Q&A

2025-10-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-61962

Affected Vendors & Products

Vendor	Product	Version / Range
fetchmail	fetchmail	7.0.0
fetchmail	fetchmail	6.5.5
fetchmail	fetchmail	6.5.6
fetchmail	fetchmail	5.9.9

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-142	The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as value delimiters when they are sent to a downstream component.

Attack-Flow Graph

Impact Analysis

The impact of this vulnerability is that the SMTP client may crash, causing a denial of service. It does not affect confidentiality or integrity but can disrupt availability.

Executive Summary

This vulnerability occurs in fetchmail versions before 6.5.6, where the SMTP client can crash during authentication if it receives a 334 status code in a malformed context.

Hi! I’m here to help you understand CVE-2025-61962. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70