3.7
Low
CVE-2026-43964 Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash…
Description
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Postfix 3.10 | 3.10 → < 3.10.9 | 3.10.9 |
| Postfix 3.9 | 3.9 → < 3.9.10 | 3.9.10 |
| Postfix 2.3 | 2.3 → < 3.8.16 | 3.8.16 |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Red Hat Enterprise Linux BaseOS (v. 8) | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published |
Show the 11 other branches Hide the 11 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | Versions not published | |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | Versions not published | |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | Versions not published | |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published |
References
- www.mail-archive.com www.mail-archive.com
Timeline
- Published
- Last modified