srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU consumption) via a long timestamp tag in an SRS address.

The remote host is affected by the vulnerability described in GLSA-202107-08 (PostSRSd: Denial of service)

    Multiple vulnerabilities have been discovered in PostSRSd. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker could cause a possible Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1642-1 advisory.

  - srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU consumption) via     a long timestamp tag in an SRS address. (CVE-2020-35573)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for postsrsd fixes the following issues :

Update to release 1.11 [boo#1180251]

  - Drop group privileges as well as user privileges

  - Fixed: The subprocess that talks to Postfix could be     caused to hang with a very long email address.
    [CVE-2020-35573]

Update to release 1.6

  - Fix endianness issue with SHA-1 implementation

  - Add dual stack support

  - Make SRS separator configurable

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4730-1 advisory.

    It was discovered that PostSRSd mishandled certain input. A remote attacker could use this vulnerability     to cause a denial of service via a long timestamp tag in an SRS address.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

postsrsd developer reports :

PostSRSd could be tricked into consuming a lot of CPU time with an SRS address that has an excessively long time stamp tag.

A potential denial of service attack through malicious timestamp tags was fixed in PostSRSd, a Sender Rewriting Scheme (SRS) lookup table for Postfix.

For Debian 9 stretch, this problem has been fixed in version 1.4-1+deb9u1.

We recommend that you upgrade your postsrsd packages.

For the detailed security status of postsrsd please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/postsrsd

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
156984	GLSA-202107-08 : PostSRSd: Denial of service	Nessus	Gentoo Local Security Checks	high
156426	openSUSE 15 Security Update : postrsd (openSUSE-SU-2021:1642-1)	Nessus	SuSE Local Security Checks	high
149629	openSUSE Security Update : postsrsd (openSUSE-2021-646)	Nessus	SuSE Local Security Checks	high
146385	Ubuntu 18.04 LTS : PostSRSd vulnerability (USN-4730-1)	Nessus	Ubuntu Local Security Checks	high
144582	FreeBSD : postsrsd -- Denial of service vulnerability (eb2845c4-43ce-11eb-aba5-00a09858faf5)	Nessus	FreeBSD Local Security Checks	high
144478	Debian DLA-2502-1 : postsrsd security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-35573

high

Tenable Plugins

high

high

high

high

high

high