PostSRSd before 1.11 allows a denial of service (subprocess hang) if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger this condition by an external attacker, but it is a security bug in PostSRSd nevertheless."
References
| Link | Resource |
|---|---|
| https://bugs.gentoo.org/793674 | Issue Tracking Patch Release Notes Third Party Advisory |
| https://github.com/roehling/postsrsd/commit/077be98d8c8a9847e4ae0c7dc09e7474cbe27db2 | Patch Third Party Advisory |
| https://github.com/roehling/postsrsd/releases/tag/1.11 | Release Notes Third Party Advisory |
| https://security.gentoo.org/glsa/202107-08 | Third Party Advisory |
| https://bugs.gentoo.org/793674 | Issue Tracking Patch Release Notes Third Party Advisory |
| https://github.com/roehling/postsrsd/commit/077be98d8c8a9847e4ae0c7dc09e7474cbe27db2 | Patch Third Party Advisory |
| https://github.com/roehling/postsrsd/releases/tag/1.11 | Release Notes Third Party Advisory |
| https://security.gentoo.org/glsa/202107-08 | Third Party Advisory |
Configurations
History
21 Nov 2024, 06:12
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugs.gentoo.org/793674 - Issue Tracking, Patch, Release Notes, Third Party Advisory | |
| References | () https://github.com/roehling/postsrsd/commit/077be98d8c8a9847e4ae0c7dc09e7474cbe27db2 - Patch, Third Party Advisory | |
| References | () https://github.com/roehling/postsrsd/releases/tag/1.11 - Release Notes, Third Party Advisory | |
| References | () https://security.gentoo.org/glsa/202107-08 - Third Party Advisory |
Information
Published : 2021-06-28 18:15
Updated : 2024-11-21 06:12
NVD link : CVE-2021-35525
Mitre link : CVE-2021-35525
CVE.ORG link : CVE-2021-35525
JSON object : View
Products Affected
postsrsd_project
- postsrsd
CWE