CVE-2010-2494
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer...
CVE-2010-2494 is a medium vulnerability (CVSS 5.0) in Bogofilter, published July 8, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.44%, the 89th percentile. Fixed in bogofilter 1.2.1-3.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 3.44%EPSS, 89th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.1-3bogofilter +2 more
Description
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bogofilterDebian:12 | before 1.2.1-3 | 1.2.1-3 |
bogofilterDebian:13 | before 1.2.1-3 | 1.2.1-3 |
bogofilterDebian:14 | before 1.2.1-3 | 1.2.1-3 |
What each source reports
NVD Score used
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
CVE-2010-2494- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
CVE-2010-2494- Updated
- 2026-11-02
EUVDEUVD-2010-2498No score
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
EUVD-2010-2498- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rwg2-273c-ccqwNo score
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer...
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
GHSA-rwg2-273c-ccqw- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
CVE-2010-2494- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2494No score
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
- Record
DEBIAN-CVE-2010-2494- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10502-1No score
bogofilter-common-1.2.4-9.6 on GA media
These are all security issues fixed in the bogofilter-common-1.2.4-9.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10502-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.fedoraproject.org/pipermail/package-announce/2010-August/046558.html
marc.info?l=oss-security&m=127840569013531&w=2
secunia.com/advisories/40427
bogofilter.sourceforge.net/security/bogofilter-SA-2010-01
bogofilter.svn.sourceforge.net/viewvc/bogofilter/trunk/bogofilter/doc/bogofilter-SA-2010-01?revision=6909&pathrev=6909
Show 19 moreShow less
osvdb.org/66002
lists.opensuse.org/opensuse-security-announce/2012-12/msg00016.html
vupen.com/english/advisories/2010/2233
securityfocus.com/bid/41339
bugzilla.redhat.com/show_bug.cgi?id=611551
ubuntu.com/usn/USN-980-1
nvd.nist.gov/vuln/detail/CVE-2010-2494
github.com/advisories/GHSA-rwg2-273c-ccqw
security-tracker.debian.org/tracker/CVE-2010-2494
suse.com/security/cve/CVE-2010-2494