CVE-2010-2494
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer...
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
Exploit likelihood
What each source reports
NVD Score used
5.0
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
CVE-2010-2494- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
CVE-2010-2494- Updated
- 2026-11-02
EUVDEUVD-2010-2498 No score
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
EUVD-2010-2498- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rwg2-273c-ccqw No score
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer...
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
GHSA-rwg2-273c-ccqw- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
CVE-2010-2494- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2494 No score
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
DEBIAN-CVE-2010-2494- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10502-1 No score
bogofilter-common-1.2.4-9.6 on GA media
These are all security issues fixed in the bogofilter-common-1.2.4-9.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10502-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bogofilterDebian:12 |
before 1.2.1-3 | 1.2.1-3 |
bogofilterDebian:13 |
before 1.2.1-3 | 1.2.1-3 |
bogofilterDebian:14 |
before 1.2.1-3 | 1.2.1-3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2494 is a medium vulnerability (CVSS 5.0) in Bogofilter, published July 8, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.44%, the 89th percentile. Fixed in bogofilter 1.2.1-3.
References
lists.fedoraproject.org/pipermail/package-announce/2010-August/046558.html
marc.info?l=oss-security&m=127840569013531&w=2
secunia.com/advisories/40427
bogofilter.sourceforge.net/security/bogofilter-SA-2010-01
secunia.com/advisories/41239
bogofilter.svn.sourceforge.net/viewvc/bogofilter/trunk/bogofilter/doc/bogofilter-SA-2010-01?revision=6909&pathrev=6909
Show 19 moreShow less
osvdb.org/66002
lists.opensuse.org/opensuse-security-announce/2012-12/msg00016.html
lists.opensuse.org/opensuse-security-announce/2012-12/msg00015.html
marc.info?l=oss-security&m=127844323105405&w=2
lists.opensuse.org/opensuse-security-announce/2013-01/msg00021.html
bogofilter.svn.sourceforge.net/viewvc/bogofilter/trunk/bogofilter/src/base64.c?view=patch&r1=6906&r2=6903
vupen.com/english/advisories/2010/2233
securityfocus.com/bid/41339
bugzilla.redhat.com/show_bug.cgi?id=611551
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
lists.fedoraproject.org/pipermail/package-announce/2010-August/046590.html
marc.info?l=oss-security&m=127814747231102&w=2
ubuntu.com/usn/USN-980-1
marc.info?l=oss-security&m=127831760712436&w=2
nvd.nist.gov/vuln/detail/CVE-2010-2494
github.com/advisories/GHSA-rwg2-273c-ccqw
security-tracker.debian.org/tracker/CVE-2010-2494
suse.com/security/cve/CVE-2010-2494
suse.com/security/cve/CVE-2012-5468