CVE-2010-2494: Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofil...

Security readout for executives and security teams

A malformed email could crash bogofilter or bogolexer when they decode Base64 content. The known impact is denial of service, not data theft or code execution. Organizations using bogofilter in mail filtering paths should confirm they are not running versions before 1.2.2. Exposure is limited to systems that use bogofilter or bogolexer, especially mail-processing servers or clients where incoming email is parsed by vulnerable versions before 1.2.2. Treat as a targeted availability risk for legacy mail-filtering deployments. It is not marked as actively exploited, but vulnerable mail paths should be updated because remote email input can crash filtering components. Mitigation focus: Upgrade bogofilter and bogolexer to version 1.2.2 or a fixed vendor package.; Apply distribution security updates from Fedora, Ubuntu, SUSE, or your platform vendor.; Prioritize mail gateways or automated filtering systems using bogofilter..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.