postfix vulnerabilities (Debian)

11 vulnerabilities.

• postfix Debian Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over... CVE-2026-43964 Fix available 3.7 LowMay 4, 2026
• postfix Debian Postfix through 3.8.4 allows SMTP smuggling unless configured with smtpd_data_restrictions... CVE-2023-51764 Public exploitFix available 5.3 MediumDecember 24, 2023
• postfix Debian The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x... CVE-2011-1720 Fix available EPSS 21.5% 6.8 MediumMay 10, 2011
• postfix Debian The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6... CVE-2011-0411 Fix available EPSS 16.3% 6.8 MediumMarch 16, 2011
• postfix Debian The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the... CVE-2009-2939 Fix available 6.9 MediumSeptember 21, 2009
• postfix Debian Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux... CVE-2008-3889 Fix available 2.1 LowSeptember 12, 2008
• postfix Debian Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this... CVE-2008-2937 Fix available 1.9 LowAugust 18, 2008
• postfix Debian Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the... CVE-2008-2936 Public exploitFix available 6.2 MediumAugust 14, 2008
• postfix Debian Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in... CVE-2005-0337 Fix available 7.5 HighFebruary 10, 2005
• postfix Debian The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial... CVE-2003-0540 Public exploitFix available EPSS 21.3% 5.0 MediumAugust 3, 2003
• postfix Debian Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or... CVE-2003-0468 Fix available 5.0 MediumAugust 3, 2003