HIGH
pcre heap overflow
Published Aug 22, 2005
7.5
HIGHCVSS 2.0
EPSS 4.34%
Description
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
Affected products
No data.
No data.
Red Hat Enterprise Linux 3
pcre-0:3.9-10.2
Fixed · RHSA-2005:761
Red Hat Enterprise Linux 3
python-0:2.2.3-6.2
Fixed · RHSA-2006:0197
Red Hat Enterprise Linux 4
exim-0:4.43-1.RHEL4.5
Fixed · RHSA-2005:358
Red Hat Enterprise Linux 4
pcre-0:4.5-3.2.RHEL4
Fixed · RHSA-2005:761
Red Hat Enterprise Linux 4
python-0:2.3.4-14.2
Fixed · RHSA-2006:0197
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 3 | pcre-0:3.9-10.2 | Fixed | RHSA-2005:761 |
| Red Hat Enterprise Linux 3 | python-0:2.2.3-6.2 | Fixed | RHSA-2006:0197 |
| Red Hat Enterprise Linux 4 | exim-0:4.43-1.RHEL4.5 | Fixed | RHSA-2005:358 |
| Red Hat Enterprise Linux 4 | pcre-0:4.5-3.2.RHEL4 | Fixed | RHSA-2005:761 |
| Red Hat Enterprise Linux 4 | python-0:2.3.4-14.2 | Fixed | RHSA-2006:0197 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
7.5 HIGH NVD
AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
4.34% 0.04344
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.04344
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (12 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 4.34% (0.04344) | 90.91th | v5 (v2026.06.15) |
| Jun 15, 2026 | 4.34% (0.04344) | 89.92th | v5 (v2026.06.15) |
| Mar 30, 2025 | 1.91% (0.01910) | 81.66th | v4 (v2025.03.14) |
| Mar 29, 2025 | 4.95% (0.04945) | 82.36th | v4 (v2025.03.14) |
| Mar 17, 2025 | 1.91% (0.01910) | 82.08th | v4 (v2025.03.14) |
| Dec 12, 2024 | 1.85% (0.01849) | 88.82th | v3 (v2023.03.01) |
| Mar 7, 2023 | 2.34% (0.02345) | 88.04th | v3 (v2023.03.01) |
| Mar 6, 2023 | 5.63% (0.05630) | 90.10th | v2 (v2022.01.01) |
| Feb 13, 2023 | 5.63% (0.05630) | 89.77th | v2 (v2022.01.01) |
| Feb 3, 2023 | 5.73% (0.05732) | 90.03th | v2 (v2022.01.01) |
| Apr 1, 2022 | 5.63% (0.05630) | 89.12th | v2 (v2022.01.01) |
| Feb 4, 2022 | 5.63% (0.05630) | 76.75th | v2 (v2022.01.01) |
Weaknesses (0)
No CWE recorded.
References (71)
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt vendor-advisoryx_refsource_SCO
- ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U vendor-advisoryx_refsource_SGI
- http://docs.info.apple.com/article.html?artnum=302847 vendor-advisoryx_refsource_APPLE
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 vendor-advisoryx_refsource_HP
- http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html vendor-advisoryx_refsource_TRUSTIX
- http://marc.info/?l=bugtraq&m=112605112027335&w=2 vendor-advisoryx_refsource_SUSE
- http://marc.info/?l=bugtraq&m=112606064317223&w=2 vendor-advisoryx_refsource_OPENPKG
- http://marc.info/?l=bugtraq&m=130497311408250&w=2 vendor-advisoryx_refsource_HP
- http://secunia.com/advisories/16502 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/16679 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/17252 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/17813 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19072 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19193 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19532 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/21522 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/22691 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/22875 third-party-advisoryx_refsource_SECUNIA
- http://securityreason.com/securityalert/604 third-party-advisoryx_refsource_SREASON
- http://securitytracker.com/id?1014744 vdb-entryx_refsource_SECTRACKPatch
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 vendor-advisoryx_refsource_SUNALERT
- http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf x_refsource_CONFIRM
- http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf x_refsource_CONFIRM
- http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm x_refsource_CONFIRM
- http://support.avaya.com/elmodocs2/security/ASA-2006-159.htm x_refsource_CONFIRM
- http://www.debian.org/security/2005/dsa-800 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2005/dsa-817 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2005/dsa-819 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2005/dsa-821 vendor-advisoryx_refsource_DEBIAN
- http://www.ethereal.com/appnotes/enpa-sa-00021.html x_refsource_CONFIRMURL Repurposed
- http://www.gentoo.org/security/en/glsa/glsa-200508-17.xml vendor-advisoryx_refsource_GENTOO
- http://www.gentoo.org/security/en/glsa/glsa-200509-02.xml vendor-advisoryx_refsource_GENTOO
- http://www.gentoo.org/security/en/glsa/glsa-200509-08.xml vendor-advisoryx_refsource_GENTOO
- http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml vendor-advisoryx_refsource_GENTOO
- http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml vendor-advisoryx_refsource_GENTOO
- http://www.novell.com/linux/security/advisories/2005_48_pcre.html vendor-advisoryx_refsource_SUSE
- http://www.novell.com/linux/security/advisories/2005_49_php.html vendor-advisoryx_refsource_SUSE
- http://www.novell.com/linux/security/advisories/2005_52_apache2.html vendor-advisoryx_refsource_SUSE
- http://www.php.net/release_4_4_1.php x_refsource_CONFIRM
- http://www.redhat.com/support/errata/RHSA-2005-358.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2005-761.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2006-0197.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/archive/1/427046/100/0/threaded vendor-advisoryx_refsource_FEDORA
- http://www.securityfocus.com/archive/1/428138/100/0/threaded vendor-advisoryx_refsource_HP
- http://www.securityfocus.com/bid/14620 vdb-entryx_refsource_BID
- http://www.securityfocus.com/bid/15647 vdb-entryx_refsource_BID
- http://www.vupen.com/english/advisories/2005/1511 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2005/2659 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/0789 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/4320 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/4502 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2005-2491 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=430638 Issue Tracking
- https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://nvd.nist.gov/vuln/detail/CVE-2005-2491
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11516 vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1496 vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1659 vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A735 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2005-2491
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Aug 22, 2005
Updated Aug 7, 2024
Reserved Aug 8, 2005
Link CVE-2005-2491
CISA Vulnrichment
Updated n/a