CVE-2006-7228

Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow...

6.8 MediumFix available

Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) duplength values that cause an incorrect length calculation and trigger a buffer overflow, a different vulnerability than CVE-2006-7227. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.

Exploit likelihood

3.66%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2006-7228
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-189
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-7228
Updated: 2026-11-02

EUVDEUVD-2006-7205 No score

Record: EUVD-2006-7205
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hw27-4fxg-c8f3 No score

Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow...

Record: GHSA-hw27-4fxg-c8f3
Updated: 2026-11-02

OSVBELL-CVE-2006-7228 6.8

CVE-2006-7228 does not affect BellSoft software

Record: BELL-CVE-2006-7228
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

OSV No score

Record: CVE-2006-7228
Updated: 2026-11-02

OSVDEBIAN-CVE-2006-7228 No score

Record: DEBIAN-CVE-2006-7228
Updated: 2026-11-02

Affected products

pcre

Affected packages

Affected packages
Package	Affected	Fixed
`pcre3` Debian:12	before 6.2-1	6.2-1
`kazehakase` Debian:4.0	before 0.4.2-1etch1, plus listed versions 0.4.2-1	0.4.2-1etch1
`pcre` Red Hat:enterprise_linux:5::client_workstation	before 0:6.6-2.el5_1.7	0:6.6-2.el5_1.7
`pcre-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:6.6-2.el5_1.7	0:6.6-2.el5_1.7
`pcre-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:6.6-2.el5_1.7	0:6.6-2.el5_1.7
`pcre` Red Hat:enterprise_linux:5::client	before 0:6.6-2.el5_1.7	0:6.6-2.el5_1.7
`pcre-debuginfo` Red Hat:enterprise_linux:5::client	before 0:6.6-2.el5_1.7	0:6.6-2.el5_1.7
`pcre` Red Hat:enterprise_linux:5::server	before 0:6.6-2.el5_1.7	0:6.6-2.el5_1.7
`pcre-debuginfo` Red Hat:enterprise_linux:5::server	before 0:6.6-2.el5_1.7	0:6.6-2.el5_1.7
`pcre-devel` Red Hat:enterprise_linux:5::server	before 0:6.6-2.el5_1.7	0:6.6-2.el5_1.7

Show 128 moreShow less

Affected packages
Package	Affected	Fixed
`pcre` Red Hat:enterprise_linux:3::as	before 0:3.9-10.4	0:3.9-10.4
`pcre-debuginfo` Red Hat:enterprise_linux:3::as	before 0:3.9-10.4	0:3.9-10.4
`pcre-devel` Red Hat:enterprise_linux:3::as	before 0:3.9-10.4	0:3.9-10.4
`pcre` Red Hat:enterprise_linux:3::desktop	before 0:3.9-10.4	0:3.9-10.4
`pcre-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:3.9-10.4	0:3.9-10.4
`pcre-devel` Red Hat:enterprise_linux:3::desktop	before 0:3.9-10.4	0:3.9-10.4
`pcre` Red Hat:enterprise_linux:3::es	before 0:3.9-10.4	0:3.9-10.4
`pcre-debuginfo` Red Hat:enterprise_linux:3::es	before 0:3.9-10.4	0:3.9-10.4
`pcre-devel` Red Hat:enterprise_linux:3::es	before 0:3.9-10.4	0:3.9-10.4
`pcre` Red Hat:enterprise_linux:3::ws	before 0:3.9-10.4	0:3.9-10.4
`pcre-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:3.9-10.4	0:3.9-10.4
`pcre-devel` Red Hat:enterprise_linux:3::ws	before 0:3.9-10.4	0:3.9-10.4
`pcre` Red Hat:enterprise_linux:2.1::as	before 0:3.4-2.4	0:3.4-2.4
`pcre-devel` Red Hat:enterprise_linux:2.1::as	before 0:3.4-2.4	0:3.4-2.4
`pcre` Red Hat:enterprise_linux:2.1::aw	before 0:3.4-2.4	0:3.4-2.4
`pcre-devel` Red Hat:enterprise_linux:2.1::aw	before 0:3.4-2.4	0:3.4-2.4
`pcre` Red Hat:enterprise_linux:2.1::es	before 0:3.4-2.4	0:3.4-2.4
`pcre-devel` Red Hat:enterprise_linux:2.1::es	before 0:3.4-2.4	0:3.4-2.4
`pcre` Red Hat:enterprise_linux:2.1::ws	before 0:3.4-2.4	0:3.4-2.4
`pcre-devel` Red Hat:enterprise_linux:2.1::ws	before 0:3.4-2.4	0:3.4-2.4
`pcre` Red Hat:enterprise_linux:4::as	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre-debuginfo` Red Hat:enterprise_linux:4::as	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre-devel` Red Hat:enterprise_linux:4::as	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre` Red Hat:enterprise_linux:4::desktop	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre-devel` Red Hat:enterprise_linux:4::desktop	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre` Red Hat:enterprise_linux:4::es	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre-debuginfo` Red Hat:enterprise_linux:4::es	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre-devel` Red Hat:enterprise_linux:4::es	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre` Red Hat:enterprise_linux:4::ws	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`pcre-devel` Red Hat:enterprise_linux:4::ws	before 0:4.5-4.el4_6.6	0:4.5-4.el4_6.6
`python` Red Hat:enterprise_linux:3::as	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-debuginfo` Red Hat:enterprise_linux:3::as	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-devel` Red Hat:enterprise_linux:3::as	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-tools` Red Hat:enterprise_linux:3::as	before 0:2.2.3-6.8	0:2.2.3-6.8
`tkinter` Red Hat:enterprise_linux:3::as	before 0:2.2.3-6.8	0:2.2.3-6.8
`python` Red Hat:enterprise_linux:3::desktop	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-devel` Red Hat:enterprise_linux:3::desktop	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-tools` Red Hat:enterprise_linux:3::desktop	before 0:2.2.3-6.8	0:2.2.3-6.8
`tkinter` Red Hat:enterprise_linux:3::desktop	before 0:2.2.3-6.8	0:2.2.3-6.8
`python` Red Hat:enterprise_linux:3::es	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-debuginfo` Red Hat:enterprise_linux:3::es	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-devel` Red Hat:enterprise_linux:3::es	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-tools` Red Hat:enterprise_linux:3::es	before 0:2.2.3-6.8	0:2.2.3-6.8
`tkinter` Red Hat:enterprise_linux:3::es	before 0:2.2.3-6.8	0:2.2.3-6.8
`python` Red Hat:enterprise_linux:3::ws	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-devel` Red Hat:enterprise_linux:3::ws	before 0:2.2.3-6.8	0:2.2.3-6.8
`python-tools` Red Hat:enterprise_linux:3::ws	before 0:2.2.3-6.8	0:2.2.3-6.8
`tkinter` Red Hat:enterprise_linux:3::ws	before 0:2.2.3-6.8	0:2.2.3-6.8
`python` Red Hat:enterprise_linux:4::as	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-debuginfo` Red Hat:enterprise_linux:4::as	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-devel` Red Hat:enterprise_linux:4::as	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-docs` Red Hat:enterprise_linux:4::as	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-tools` Red Hat:enterprise_linux:4::as	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`tkinter` Red Hat:enterprise_linux:4::as	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python` Red Hat:enterprise_linux:4::desktop	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-devel` Red Hat:enterprise_linux:4::desktop	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-docs` Red Hat:enterprise_linux:4::desktop	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-tools` Red Hat:enterprise_linux:4::desktop	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`tkinter` Red Hat:enterprise_linux:4::desktop	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python` Red Hat:enterprise_linux:4::es	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-debuginfo` Red Hat:enterprise_linux:4::es	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-devel` Red Hat:enterprise_linux:4::es	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-docs` Red Hat:enterprise_linux:4::es	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-tools` Red Hat:enterprise_linux:4::es	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`tkinter` Red Hat:enterprise_linux:4::es	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python` Red Hat:enterprise_linux:4::ws	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-devel` Red Hat:enterprise_linux:4::ws	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-docs` Red Hat:enterprise_linux:4::ws	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python-tools` Red Hat:enterprise_linux:4::ws	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`tkinter` Red Hat:enterprise_linux:4::ws	before 0:2.3.4-14.4.el4_6.1	0:2.3.4-14.4.el4_6.1
`python` Red Hat:enterprise_linux:2.1::as	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-devel` Red Hat:enterprise_linux:2.1::as	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-docs` Red Hat:enterprise_linux:2.1::as	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-tools` Red Hat:enterprise_linux:2.1::as	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`tkinter` Red Hat:enterprise_linux:2.1::as	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python` Red Hat:enterprise_linux:2.1::aw	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-devel` Red Hat:enterprise_linux:2.1::aw	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-docs` Red Hat:enterprise_linux:2.1::aw	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-tools` Red Hat:enterprise_linux:2.1::aw	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`tkinter` Red Hat:enterprise_linux:2.1::aw	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python` Red Hat:enterprise_linux:2.1::es	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-devel` Red Hat:enterprise_linux:2.1::es	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-docs` Red Hat:enterprise_linux:2.1::es	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-tools` Red Hat:enterprise_linux:2.1::es	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`tkinter` Red Hat:enterprise_linux:2.1::es	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python` Red Hat:enterprise_linux:2.1::ws	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-devel` Red Hat:enterprise_linux:2.1::ws	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-docs` Red Hat:enterprise_linux:2.1::ws	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`python-tools` Red Hat:enterprise_linux:2.1::ws	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`tkinter` Red Hat:enterprise_linux:2.1::ws	before 0:1.5.2-43.72.2	0:1.5.2-43.72.2
`php` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-devel` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-imap` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-ldap` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-manual` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-mysql` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-odbc` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-pgsql` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.20	0:4.1.2-2.20
`php` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-devel` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-imap` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-ldap` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-manual` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-mysql` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-odbc` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-pgsql` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.20	0:4.1.2-2.20
`php` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-devel` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-imap` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-ldap` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-manual` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-mysql` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-odbc` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-pgsql` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.20	0:4.1.2-2.20
`php` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-devel` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-imap` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-ldap` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-manual` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-mysql` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-odbc` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.20	0:4.1.2-2.20
`php-pgsql` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.20	0:4.1.2-2.20

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-7228 is a medium vulnerability (CVSS 6.8) in Pcre, published November 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.66%, the 89th percentile. Fixed in pcre3 6.2-1.

References

Show 114 moreShow less