CVE-2025-59032
7.5
HIGH
CVSS 3.1
EPSS 0.07%
Description
ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it's not needed. Alternatively upgrade to a fixed version. No publicly available exploits are known.
How to fix CVE-2025-59032
To remediate CVE-2025-59032, upgrade the affected package to a fixed version below.
- —upgrade to 1:2.3.13+dfsg1-2+deb11u3 or later
Is CVE-2025-59032 being exploited?
Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 1:2.3.13+dfsg1-2+deb11u3
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |