← CVE Intelligence

CVE-2026-43964

Postfix / Postfix PUBLISHED

Description (CNA)

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

Affected (CNA)

Vendor / productVersions
Postfix / Postfixaffected 2.3 before 3.8.16; affected 3.9 before 3.9.10; affected 3.10 before 3.10.9

CWE

CWE-193

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

redhat-SADP

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to an application crash and resulting in a denial of service.