WS-2026-0069

Postfix heap memory over-read while formatting a malformed multiline Milter reply. milter8event indexed bytes 0 through 4 of the reply buffer with no length check and did not validate each line of a multiline reply, so a malicious Milter or an attacker-in-the-middle on the Milter connection could...