Medium severity5.3NVD Advisory· Published Jun 28, 2021· Updated Jun 17, 2026

CVE-2021-35525

Description

PostSRSd before 1.11 allows a denial of service (subprocess hang) if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger this condition by an external attacker, but it is a security bug in PostSRSd nevertheless."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PostSRSd/PostSRSddescription
Postfix/PostSRSdllm-create
Range: <1.11
Postsrsd Project/Postsrsd
cpe:2.3:a:postsrsd_project:postsrsd:*:*:*:*:*:*:*:*
Range: <1.11

Patches

Vulnerability mechanics

References

bugs.gentoo.org/793674nvdIssue TrackingPatchRelease NotesThird Party Advisory
github.com/roehling/postsrsd/commit/077be98d8c8a9847e4ae0c7dc09e7474cbe27db2nvdPatchThird Party Advisory
github.com/roehling/postsrsd/releases/tag/1.11nvdRelease NotesThird Party Advisory
security.gentoo.org/glsa/202107-08nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000