USN-6591-1

    Dashboard / Vulnerabilities / USN-6591-1

    USN-6591-1

    Published: 22 Jan 2024Last Modified: 29 Jun 2026

    Summary: postfix vulnerability

    Details: Timo Longin discovered that Postfix incorrectly handled certain email line endings. A remote attacker could possibly use this issue to bypass an email authentication mechanism, allowing domain spoofing and potential spamming. Please note that certain configuration changes are required to address this issue. They are not enabled by default for backward compatibility. Information can be found at https://www.postfix.org/smtp-smuggling.html.

    References: https://ubuntu.com/security/notices/USN-6591-1, https://ubuntu.com/security/CVE-2023-51764, https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/2049337

    Affected packages

    Package

    Name: postfix

    Purl: pkg:deb/ubuntu/postfix?arch=source&distro=trusty%2Fesm

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.11.0-1ubuntu1.2+esm2

    Affected versions

    2.10.2-1
    2.10.2-1build1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High