PT-2026-36908 · Postfix+2 · Postfix+2

Claude Opus · Published 2026-05-04 · Updated 2026-06-02 · CVE-2026-43964

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Postfix versions prior to 3.8.16 Postfix versions 3.9 prior to 3.9.10 Postfix versions 3.10 prior to 3.10.9

Description A buffer over-read can occur, potentially leading to a process crash, when an enhanced status code is used that lacks text after the third number.

Recommendations Update to version 3.8.16 or later. Update to version 3.9.10 or later. Update to version 3.10.9 or later.

Fix

DoS

Weakness Enumeration

CWE-193

Related Identifiers

CVE-2026-43964

OESA-2026-2209

OESA-2026-2288

OESA-2026-2289

OESA-2026-2290

OESA-2026-2291

OPENSUSE-SU-2026:10707-1

USN-8253-1

Affected Products

Linuxmint

Postfix

Ubuntu

References · 33

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43964 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2290 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43964 · Security Note
• https://ubuntu.com/security/CVE-2026-43964 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2289 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43964 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10707-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8253-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2288 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2209 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43964 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2291 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8253-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43964 · Security Note
• https://openwall.com/lists/oss-security/2026/05/04/25 · Note