PT-2026-36908

CVE-2026-43964

·

Published

2026-05-03

·

Updated

2026-09-01

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Postfix versions prior to 3.8.16 Postfix versions 3.9 prior to 3.9.10 Postfix versions 3.10 prior to 3.10.9
Description A buffer over-read can occur, potentially leading to a process crash, when an enhanced status code is used that lacks text after the third number.
Recommendations Update to version 3.8.16 or later. Update to version 3.9.10 or later. Update to version 3.10.9 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2026:25930
ALSA-2026:25932
ALSA-2026:26205
AZL-85709
CLSA-2026-1788261251
OESA-2026-2209
OESA-2026-2288
OESA-2026-2289
OESA-2026-2290
OESA-2026-2291
OPENSUSE-SU-2026:10707-1
OPENSUSE-SU-2026:21020-1
RHSA-2026:25930
RHSA-2026:25932
RHSA-2026:26205
RHSA-2026:50963
RHSA-2026:50964
RHSA-2026:51034
RHSA-2026:51436
RHSA-2026:57174
SUSE-SU-2026:22335-1
SUSE-SU-2026:2780-1
SUSE-SU-2026:2781-1
USN-8253-1
USN-8253-2
Found an issue in the description? Have something to add? Feel free to write us 👾