Postfix vulnerabilities

Products

• Postfix 12

Newest

• postfix, red hat enterprise linux 10, enterprise linux 10.0 extended update support +10 more +12 more Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over... CVE-2026-43964 Fix available 3.7 LowMay 4, 2026
• postfix, fedoraproject fedora, redhat enterprise linux +2 more Postfix through 3.8.4 allows SMTP smuggling unless configured with smtpd_data_restrictions... CVE-2023-51764 Public exploitFix available 5.3 MediumDecember 24, 2023
• postfix ** DISPUTED ** A certain Postfix 2.10.1-7 package could allow an attacker to send an email from... CVE-2020-12063 Disputed 5.3 MediumApril 24, 2020
• postfix Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might... CVE-2017-10140 Fix available 7.8 HighAugust 14, 2017
• postfix Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow... CVE-2012-0811 Fix available 6.5 MediumOctober 1, 2014
• postfix The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x... CVE-2011-1720 Fix available EPSS 21.5% 6.8 MediumMay 10, 2011
• postfix The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6... CVE-2011-0411 Fix available EPSS 16.3% 6.8 MediumMarch 16, 2011
• postfix The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the... CVE-2009-2939 Fix available 6.9 MediumSeptember 21, 2009
• postfix ** DISPUTED ** postfix_groups.pl in Postfix 2.5.2 allows local users to overwrite arbitrary... CVE-2008-4977 Disputed 6.9 MediumNovember 6, 2008
• postfix Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux... CVE-2008-3889 Fix available 2.1 LowSeptember 12, 2008
• postfix Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this... CVE-2008-2937 Fix available 1.9 LowAugust 18, 2008
• postfix Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the... CVE-2008-2936 Public exploitFix available 6.2 MediumAugust 14, 2008