CVE-2006-4980
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context...
CVE-2006-4980 is a high vulnerability (CVSS 7.5) in Python, published October 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.50%, the 92nd percentile. Fixed in python2.4 2.4.1-2sarge1.
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
Exploit likelihood
What each source reports
NVD Score used
7.5
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
- Record
CVE-2006-4980- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
- Record
CVE-2006-4980- Updated
- 2026-11-02
EUVDEUVD-2006-4966 No score
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
- Record
EUVD-2006-4966- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7rjj-4jxg-6hg5 No score
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context...
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
- Record
GHSA-7rjj-4jxg-6hg5- Updated
- 2026-11-02
OSVAZL-109551 No score
CVE-2006-4980 affecting package python-py 1.11.0-1
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
- Record
AZL-109551- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-pyAzure Linux:3 |
through 1.11.0-1 | None known |
python2.4Debian:3.1 |
before 2.4.1-2sarge1, plus listed versions 2.4.1-2 |
2.4.1-2sarge1 |
python2.3Debian:3.1 |
before 2.3.5-3sarge2, plus listed versions 2.3.5-32.3.5-3sarge1 |
2.3.5-3sarge2 |
pythonRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-develRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-toolsRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
tkinterRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
pythonRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
Show 45 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-develRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-toolsRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
tkinterRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
pythonRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-develRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-toolsRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
tkinterRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
pythonRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-develRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
python-toolsRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
tkinterRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.5 | 0:2.2.3-6.5 |
pythonRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-develRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-docsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-toolsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
tkinterRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
pythonRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-develRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-docsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-toolsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
tkinterRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
pythonRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-develRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-docsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-toolsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
tkinterRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
pythonRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-develRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-docsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
python-toolsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
tkinterRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.3 | 0:2.3.4-14.3 |
rhn-solaris-bootstrapRed Hat:network_satellite:5.0:el4 |
before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:5.0:el4 |
before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:4.2::el3 |
before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:4.2::el3 |
before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:4.2::el4 |
before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:4.2::el4 |
before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:5.1::el4 |
before 0:5.1.1-3 | 0:5.1.1-3 |
rhn_solaris_bootstrap_5_1_1_3Red Hat:network_satellite:5.1::el4 |
before 0:1-0 | 0:1-0 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/22303
debian.org/security/2006/dsa-1197
vmware.com/support/vi3/doc/esx-3069097-patch.html
secunia.com/advisories/22487
securityfocus.com/archive/1/448244/100/100/threaded
secunia.com/advisories/22639
Show 93 moreShow less
mandriva.com/security/advisories?name=MDKSA-2006:181
exchange.xforce.ibmcloud.com/vulnerabilities/29408
secunia.com/advisories/23680
secunia.com/advisories/22512
launchpad.net/distros/ubuntu/+source/python2.4/+bug/56633
zoehep.xent.com/~bsittler/python2.4-2.4.3_unicodeobject.c.diff
support.avaya.com/elmodocs2/security/ASA-2006-229.htm
sourceforge.net/tracker/index.php?func=detail&aid=1541585&group_id=5470&atid=305470
secunia.com/advisories/31492
redhat.com/support/errata/RHSA-2008-0629.html
redhat.com/support/errata/RHSA-2006-0713.html
vupen.com/english/advisories/2006/5131
securitytracker.com/id?1017019
secunia.com/advisories/22357
debian.org/security/2006/dsa-1198
secunia.com/advisories/22379
ubuntu.com/usn/usn-359-1
secunia.com/advisories/22448
novell.com/linux/security/advisories/2006_25_sr.html
securityfocus.com/bid/20376
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=208162
security.gentoo.org/glsa/glsa-200610-07.xml
vupen.com/english/advisories/2006/3940
issues.rpath.com/browse/RPL-702
bugs.debian.org/cgi-bin/bugreport.cgi?bug=391589
securityfocus.com/archive/1/456546/100/200/threaded
secunia.com/advisories/22358
vmware.com/support/vi3/doc/esx-9986131-patch.html
secunia.com/advisories/22297
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10789
kb.vmware.com/KanisaPlatform/Publishing/882/5120103_f.SAL_Public.html
secunia.com/advisories/22531
secunia.com/advisories/22276
nvd.nist.gov/vuln/detail/CVE-2006-4980
github.com/advisories/GHSA-7rjj-4jxg-6hg5
access.redhat.com/errata/RHSA-2006:0713
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=160418
bugzilla.redhat.com/show_bug.cgi?id=208162
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0713.json
access.redhat.com/security/cve/CVE-2006-4980
bugzilla.redhat.com/show_bug.cgi?id=430641
cve.org/CVERecord?id=CVE-2006-4980
access.redhat.com/errata/RHSA-2008:0264
bugzilla.redhat.com/show_bug.cgi?id=235093
bugzilla.redhat.com/show_bug.cgi?id=295971
bugzilla.redhat.com/show_bug.cgi?id=430640
bugzilla.redhat.com/show_bug.cgi?id=430649
bugzilla.redhat.com/show_bug.cgi?id=430651
bugzilla.redhat.com/show_bug.cgi?id=430652
bugzilla.redhat.com/show_bug.cgi?id=430654
bugzilla.redhat.com/show_bug.cgi?id=430655
bugzilla.redhat.com/show_bug.cgi?id=430659
bugzilla.redhat.com/show_bug.cgi?id=430660
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0264.json
access.redhat.com/security/cve/CVE-2005-1849
cve.org/CVERecord?id=CVE-2005-1849
nvd.nist.gov/vuln/detail/CVE-2005-1849
access.redhat.com/security/cve/CVE-2005-2096
bugzilla.redhat.com/show_bug.cgi?id=430650
cve.org/CVERecord?id=CVE-2005-2096
nvd.nist.gov/vuln/detail/CVE-2005-2096
access.redhat.com/security/cve/CVE-2005-2969
cve.org/CVERecord?id=CVE-2005-2969
nvd.nist.gov/vuln/detail/CVE-2005-2969
access.redhat.com/security/cve/CVE-2006-1542
cve.org/CVERecord?id=CVE-2006-1542
nvd.nist.gov/vuln/detail/CVE-2006-1542
access.redhat.com/security/cve/CVE-2006-2937
cve.org/CVERecord?id=CVE-2006-2937
nvd.nist.gov/vuln/detail/CVE-2006-2937
access.redhat.com/security/cve/CVE-2006-2940
cve.org/CVERecord?id=CVE-2006-2940
nvd.nist.gov/vuln/detail/CVE-2006-2940
access.redhat.com/security/cve/CVE-2006-3738
cve.org/CVERecord?id=CVE-2006-3738
nvd.nist.gov/vuln/detail/CVE-2006-3738
access.redhat.com/security/cve/CVE-2006-4339
cve.org/CVERecord?id=CVE-2006-4339
nvd.nist.gov/vuln/detail/CVE-2006-4339
access.redhat.com/security/cve/CVE-2006-4343
cve.org/CVERecord?id=CVE-2006-4343
nvd.nist.gov/vuln/detail/CVE-2006-4343
access.redhat.com/security/cve/CVE-2007-2052
cve.org/CVERecord?id=CVE-2007-2052
nvd.nist.gov/vuln/detail/CVE-2007-2052
access.redhat.com/security/cve/CVE-2007-4965
cve.org/CVERecord?id=CVE-2007-4965
nvd.nist.gov/vuln/detail/CVE-2007-4965
access.redhat.com/errata/RHSA-2008:0525
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0525.json
access.redhat.com/errata/RHSA-2008:0629
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0629.json