CVE-2010-2494

EUVD-2010-2498
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
Affected Products (NVD)
VendorProductVersion
bogofilterbogofilter
𝑥
≤ 1.2.1
bogofilterbogofilter
1.0.0
bogofilterbogofilter
1.0.1
bogofilterbogofilter
1.0.2
bogofilterbogofilter
1.0.3
bogofilterbogofilter
1.1.0
bogofilterbogofilter
1.1.1
bogofilterbogofilter
1.1.2
bogofilterbogofilter
1.1.3
bogofilterbogofilter
1.1.4
bogofilterbogofilter
1.1.5
bogofilterbogofilter
1.1.6
bogofilterbogofilter
1.1.7
bogofilterbogofilter
1.2.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bogofilter
bookworm
1.2.5-1
fixed
bullseye
1.2.5-1
fixed
sid
1.2.5-1
fixed
trixie
1.2.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bogofilter
dapper
ignored
hardy
Fixed 1.1.5-2ubuntu5.1
released
jaunty
Fixed 1.1.7-1ubuntu1.1
released
karmic
Fixed 1.2.0-3ubuntu1.1
released
lucid
Fixed 1.2.1-0ubuntu1.1
released
References