Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-35525 →
DEBIAN-CVE-2021-35525
PostSRSd before 1.11 allows a denial of service (subprocess hang) if Postfix sends certain long data fields such as multiple concatenated email addres...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
PostSRSd before 1.11 allows a denial of service (subprocess hang) if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger this condition by an external attacker, but it is a security bug in PostSRSd nevertheless."
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
postsrsd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10-2"}]}]
Debian:13
postsrsd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10-2"}]}]
Debian:14
postsrsd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10-2"}]}]
Références
- advisory security-tracker.debian.org