CVE-2013-2125

OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service (connection blocking) by keeping a connection open.

View graph Watch Export

CVSS v3.1

—

EPSS

2.47%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

2 relationships

CWE-310

source

Timeline

disclosure → media coverage

May 27, 2014

Disclosure — published as a CVE record. · last revised by NVD May 6, 2026