CVE-2006-7228
Fixed in a distro release EPSS 4%
Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) duplength values that cause an incorrect length calculation and trigger a buffer overflow, a different vulnerability than CVE-2006-7227. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.
Products: pcre
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pcre3 | 6.2-1 |
| Debian 4.0 | kazehakase | 0.4.2-1etch1 |
| Red Hat Enterprise Linux 2.1 | pcre | 0:3.4-2.4 |
| Red Hat Enterprise Linux 2.1 | pcre-devel | 0:3.4-2.4 |
| Red Hat Enterprise Linux 2.1 | php | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-devel | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-imap | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-ldap | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-manual | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-mysql | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-odbc | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-pgsql | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | python | 0:1.5.2-43.72.2 |
| Red Hat Enterprise Linux 2.1 | python-devel | 0:1.5.2-43.72.2 |
| Red Hat Enterprise Linux 2.1 | python-docs | 0:1.5.2-43.72.2 |
| Red Hat Enterprise Linux 2.1 | python-tools | 0:1.5.2-43.72.2 |
| Red Hat Enterprise Linux 2.1 | tkinter | 0:1.5.2-43.72.2 |
| Red Hat Enterprise Linux 3 | pcre | 0:3.9-10.4 |
| Red Hat Enterprise Linux 3 | pcre-debuginfo | 0:3.9-10.4 |
| Red Hat Enterprise Linux 3 | pcre-devel | 0:3.9-10.4 |
| Red Hat Enterprise Linux 3 | python | 0:2.2.3-6.8 |
| Red Hat Enterprise Linux 3 | python-debuginfo | 0:2.2.3-6.8 |
| Red Hat Enterprise Linux 3 | python-devel | 0:2.2.3-6.8 |
| Red Hat Enterprise Linux 3 | python-tools | 0:2.2.3-6.8 |
| Red Hat Enterprise Linux 3 | tkinter | 0:2.2.3-6.8 |
| Red Hat Enterprise Linux 4 | pcre | 0:4.5-4.el4_6.6 |
| Red Hat Enterprise Linux 4 | pcre-debuginfo | 0:4.5-4.el4_6.6 |
| Red Hat Enterprise Linux 4 | pcre-devel | 0:4.5-4.el4_6.6 |
| Red Hat Enterprise Linux 4 | python | 0:2.3.4-14.4.el4_6.1 |
| Red Hat Enterprise Linux 4 | python-debuginfo | 0:2.3.4-14.4.el4_6.1 |
| Red Hat Enterprise Linux 4 | python-devel | 0:2.3.4-14.4.el4_6.1 |
| Red Hat Enterprise Linux 4 | python-docs | 0:2.3.4-14.4.el4_6.1 |
| Red Hat Enterprise Linux 4 | python-tools | 0:2.3.4-14.4.el4_6.1 |
| Red Hat Enterprise Linux 4 | tkinter | 0:2.3.4-14.4.el4_6.1 |
| Red Hat Enterprise Linux 5 | pcre | 0:6.6-2.el5_1.7 |
| Red Hat Enterprise Linux 5 | pcre-debuginfo | 0:6.6-2.el5_1.7 |
| Red Hat Enterprise Linux 5 | pcre-devel | 0:6.6-2.el5_1.7 |