CVE-2023-51764

Summary

CVECVE-2023-51764
StatePUBLISHED
AssignerUnknown
Source PriorityCVE Program / NVD first with legacy fallback
Published2023-12-24 05:15:00 UTC
Updated2024-01-30 14:15:00 UTC
DescriptionDescription unavailable.

Risk And Classification

Problem Types: CWE-345

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Fedoraproject Fedora 38 All All All
Operating System Fedoraproject Fedora 39 All All All
Application Postfix Postfix All All All All
Operating System Redhat Enterprise Linux 8.0 All All All
Operating System Redhat Enterprise Linux 9.0 All All All

References

ReferenceSourceLinkTags
oss-security - Re: Re: New SMTP smuggling attack www.openwall.com Mailing List, Third Party Advisory
oss-security - Postfix updated SMTP smuggling countermeasure www.openwall.com
www.youtube.com/watch www.youtube.com Exploit
access.redhat.com/security/cve/CVE-2023-51764 access.redhat.com Third Party Advisory
github.com/eeenvik1/CVE-2023-51764 github.com Exploit, Third Party Advisory
Smuggling email inside of email [LWN.net] lwn.net
oss-security - Re: Re: New SMTP smuggling attack www.openwall.com
[SECURITY] Fedora 38 Update: postfix-3.7.9-1.fc38 - package-announce - Fedora Mailing-Lists lists.fedoraproject.org
www.postfix.org/smtp-smuggling.html www.postfix.org
github.com/duy-31/CVE-2023-51764 github.com Exploit, Third Party Advisory
bugzilla.redhat.com/show_bug.cgi bugzilla.redhat.com Issue Tracking, Third Party Advisory
Postfix stable release 3.8.5, 3.7.10, 3.6.14, 3.5.24 www.postfix.org
[SECURITY] Fedora 39 Update: postfix-3.8.4-1.fc39 - package-announce - Fedora Mailing-Lists lists.fedoraproject.org
fahrplan.events.ccc.de/congress/2023/fahrplan/events/11782.html fahrplan.events.ccc.de Technical Description
[SECURITY] [DLA 3725-1] postfix security update lists.debian.org
SMTP Smuggling - Spoofing E-Mails Worldwide - SEC Consult sec-consult.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 200061 Ubuntu Security Notification for Postfix Vulnerability (USN-6591-1)
  • 200091 Ubuntu Security Notification for Postfix update Vulnerability (USN-6591-2)
  • 284848 Fedora Security Update for postfix (FEDORA-2024-5c186175f2)
  • 285067 Fedora Security Update for postfix (FEDORA-2024-c839e7294f)
  • 357022 Amazon Linux Security Advisory for postfix : ALAS2-2024-2420
  • 357027 Amazon Linux Security Advisory for postfix : ALAS2023-2024-495
  • 357073 Amazon Linux Security Advisory for postfix : ALAS-2024-1914
  • 6000456 Debian Security Update for postfix (DLA 3725-1)
  • 755544 SUSE Enterprise Linux Security Update for postfix (SUSE-SU-2023:4981-1)
  • 755558 SUSE Enterprise Linux Security Update for postfix (SUSE-SU-2024:0012-1)
  • 756080 SUSE Enterprise Linux Security Update for postfix (SUSE-SU-2024:1149-1)
  • 907826 Common Base Linux Mariner (CBL-Mariner) Security Update for postfix (32296-1)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report