Patchwire CVEs, their patch status, and feeds to follow them

CVE-2005-2491

Fixed in a distro release EPSS 4%

Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.

Published 2005-08-22 · CVE record · OSV

Products: pcre

Distro releases

ReleasePackageFixed in
Debian 12gnumeric1.5.1-1
Debian 12goffice0.1.0-3
Debian 12pcre36.3-1
Debian 13gnumeric1.5.1-1
Debian 13goffice0.1.0-3
Debian 14gnumeric1.5.1-1
Debian 14goffice0.1.0-3
Debian 3.0pcre33.4-1.1woody1
Debian 3.0python2.12.1.3-3.4
Debian 3.0python2.22.2.1-4.8
Debian 3.1pcre34.5-1.2sarge1
Debian 3.1python2.12.1.3dfsg-1sarge1
Debian 3.1python2.22.2.3dfsg-2sarge1
Debian 3.1python2.32.3.5-3sarge1
Debian 4.0pcre36.3-0.1etch1
Red Hat Enterprise Linux 3pcre0:3.9-10.2
Red Hat Enterprise Linux 3pcre-debuginfo0:3.9-10.2
Red Hat Enterprise Linux 3pcre-devel0:3.9-10.2
Red Hat Enterprise Linux 3python0:2.2.3-6.2
Red Hat Enterprise Linux 3python-debuginfo0:2.2.3-6.2
Red Hat Enterprise Linux 3python-devel0:2.2.3-6.2
Red Hat Enterprise Linux 3python-tools0:2.2.3-6.2
Red Hat Enterprise Linux 3tkinter0:2.2.3-6.2
Red Hat Enterprise Linux 4exim0:4.43-1.RHEL4.5
Red Hat Enterprise Linux 4exim-debuginfo0:4.43-1.RHEL4.5
Red Hat Enterprise Linux 4exim-doc0:4.43-1.RHEL4.5
Red Hat Enterprise Linux 4exim-mon0:4.43-1.RHEL4.5
Red Hat Enterprise Linux 4exim-sa0:4.43-1.RHEL4.5
Red Hat Enterprise Linux 4pcre0:4.5-3.2.RHEL4
Red Hat Enterprise Linux 4pcre-debuginfo0:4.5-3.2.RHEL4
Red Hat Enterprise Linux 4pcre-devel0:4.5-3.2.RHEL4
Red Hat Enterprise Linux 4python0:2.3.4-14.2
Red Hat Enterprise Linux 4python-debuginfo0:2.3.4-14.2
Red Hat Enterprise Linux 4python-devel0:2.3.4-14.2
Red Hat Enterprise Linux 4python-docs0:2.3.4-14.2
Red Hat Enterprise Linux 4python-tools0:2.3.4-14.2
Red Hat Enterprise Linux 4tkinter0:2.3.4-14.2