p PatchFirst

CVE-2025-61962

CVE-2025-61962

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.

CVSS 5.9 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • fetchmail

    Versions
    • ≥ 5.9.9, < 6.5.6: Affected (semver)

    Update to 6.5.6

  • fetchmail Debian:12

    Versions
    • 6.4.37-1
    • 6.4.38-1
    • 6.4.39-1
    • 6.5.6-1
    • 6.5.6-2
    • 6.5.7-1
    • 6.6.0-1
    • 6.6.1-1
    • 6.6.2-1
    • 6.6.2-2
    • 6.6.2-3
    • 6.6.3-1
    • 6.6.3-2
    • 6.6.3-3
    • 6.6.6-1
    • 6.6.8-1
    • 6.6.9-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • fetchmail Debian:13

    Versions
    • 6.4.39-1
    • 6.5.6-1
    • 6.5.6-2
    • 6.5.7-1
    • 6.6.0-1
    • 6.6.1-1
    • 6.6.2-1
    • 6.6.2-2
    • 6.6.2-3
    • 6.6.3-1
    • 6.6.3-2
    • 6.6.3-3
    • 6.6.6-1
    • 6.6.8-1
    • 6.6.9-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • fetchmail Debian:14

    Versions
    • 6.4.39-1
    Affected ranges
    • ECOSYSTEM: < 6.5.6-1

    Update to 6.5.6-1

  • fetchmail Ubuntu:16.04:LTS

    Versions
    • 6.3.26-1
    • 6.3.26-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • fetchmail Ubuntu:18.04:LTS

    Versions
    • 6.3.26-3
    • 6.3.26-3build1
    • 6.3.26-3ubuntu0.1~18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • fetchmail Ubuntu:20.04:LTS

    Versions
    • 6.4.0~rc4-1ubuntu1
    • 6.4.1-1ubuntu1
    • 6.4.2-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • fetchmail Ubuntu:22.04:LTS

    Versions
    • 6.4.22-1
    • 6.4.23-1
    • 6.4.24-1
    • 6.4.25-1
    • 6.4.26-1
    • 6.4.27-1
    Affected ranges
    • ECOSYSTEM: < 6.4.27-1ubuntu0.1

    Update to 6.4.27-1ubuntu0.1

  • fetchmail Ubuntu:24.04:LTS

    Versions
    • 6.4.37-1
    • 6.4.38-1ubuntu1
    • 6.4.38-1ubuntu3
    • 6.4.38-1ubuntu4
    Affected ranges
    • ECOSYSTEM: < 6.4.38-1ubuntu4.1

    Update to 6.4.38-1ubuntu4.1

  • fetchmail Ubuntu:25.10

    Versions
    • 6.4.39-1
    • 6.5.4-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 6.5.4-0ubuntu2

    Update to 6.5.4-0ubuntu2

  • fetchmail Ubuntu:26.04:LTS

    Affected ranges
    • ECOSYSTEM: < 6.5.4-0ubuntu2

    Update to 6.5.4-0ubuntu2

Original sources

Check your server →