Denial of Service Vulnerability in OpenSMTPD by OpenBSD
CVE-2013-2125

Currently unrated

Key Information:

Vendor

OpenBSD

Status
Vendor
CVE Published:
27 May 2014

What is CVE-2013-2125?

OpenSMTPD, an email server developed by OpenBSD, is susceptible to a denial of service condition due to improper handling of SSL sessions. Remote adversaries can exploit this vulnerability by keeping an SSL connection open, effectively blocking new connections to the server. This can lead to service unavailability, as legitimate users may be unable to access email functionalities. Implementing patches and monitoring connection behaviors are essential to mitigate risks associated with this vulnerability.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.