CVE catalog

CVE-2019-16791

postfix-mta-sts-resolver: CVE-2019-16791

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
0.86% · Oct 25, 2026

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpostfix-mta-sts-resolversid1.5.1-1not affected
Debianpostfix-mta-sts-resolverforky1.5.1-1not affected
Debianpostfix-mta-sts-resolvertrixie1.5.0-1not affected
Debianpostfix-mta-sts-resolverbookworm1.1.2-1.1not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpostfix-mta-sts-resolversourcesidNot affectedunimportantNot reportedNot reported
Debianpostfix-mta-sts-resolversourceforkyNot affectedunimportantNot reportedNot reported
Debianpostfix-mta-sts-resolversourcetrixieNot affectedunimportantNot reportedNot reported
Debianpostfix-mta-sts-resolversourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (2)
    • 1.1.2-1.1 · all · bookworm

      Not affected

      dsa · postfix-mta-sts-resolver · debian · bookworm

    • 1.1.2-1.1 · all · bookworm

      Not affected

      dsa · postfix-mta-sts-resolver · debian · bookworm

Observed:

References