CVE-2010-2494

Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
bogofilterbogofilter
𝑥
≤ 1.2.1
bogofilterbogofilter
1.0.0
bogofilterbogofilter
1.0.1
bogofilterbogofilter
1.0.2
bogofilterbogofilter
1.0.3
bogofilterbogofilter
1.1.0
bogofilterbogofilter
1.1.1
bogofilterbogofilter
1.1.2
bogofilterbogofilter
1.1.3
bogofilterbogofilter
1.1.4
bogofilterbogofilter
1.1.5
bogofilterbogofilter
1.1.6
bogofilterbogofilter
1.1.7
bogofilterbogofilter
1.2.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bogofilter
bookworm
1.2.5-1
fixed
bullseye
1.2.5-1
fixed
sid
1.2.5-1
fixed
trixie
1.2.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bogofilter
lucid
Fixed 1.2.1-0ubuntu1.1
released
karmic
Fixed 1.2.0-3ubuntu1.1
released
jaunty
Fixed 1.1.7-1ubuntu1.1
released
hardy
Fixed 1.1.5-2ubuntu5.1
released
dapper
ignored
References