NetSight
low3.7

CVE-2026-43964

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks t…

Impact

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

Affected products

VendorProductAffected versions
PostfixPostfix
before 3.8.16
from 3.9.0 before 3.9.10
from 3.10.0 before 3.10.9

Weakness classification

References