CVE-2019-16791

Katalog CVE

CVSS 5.9 · Medium EPSS 0,86%

Kerentanan Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') pada postfix-mta-sts-resolver project postfix-mta-sts-resolver. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.

Rincian

Terbit di NVD

22 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-757: Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

EPSS (30 hari)

0,86% peluang dieksploitasi; lebih tinggi dari 57,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/Snawoot/b9da85d6b26dea5460673b29df1adc6b patch · advisory pihak ketiga
• https://github.com/Snawoot/postfix-mta-sts-resolver/security/advisories/GHSA-h92m-42h4-82f6 patch · advisory pihak ketiga