CVE-2020-35573

The CVE-2020-35573 issue is in PostSRSd: srs2.c before 1.10 allows remote attackers to trigger a denial of service (CPU consumption) via a long timestamp tag in an SRS address. Public advisories show multiple vendors releasing patches/upgrades (PostSRSd 1.11+ with fixes such as dropping privilege...

CVE-2021-35525

CVE-2021-35525 concerns PostSRSd prior to 1.11. The vulnerability causes a denial of service (subprocess hang) when Postfix sends certain long data fields, such as multiple concatenated email addresses. The issue originates from PostSRSd itself, described as a security bug, with uncertainty about...