CVE Catalog
CVE-2026-43964
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk0.49%
40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability in Postfix before versions 3.8.16, 3.9.10, and 3.10.9 allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.
Risk Assessment
An attacker can crash the mail server process, leading to denial of service (DoS) and potential loss of email availability.
Recommendation
Immediately upgrade Postfix to version 3.8.16, 3.9.10, or 3.10.9, depending on the branch in use.
Original NVD description (English source)
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.