Every CVESearch/Get API key

CVE-2006-4980

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context...

7.5 HighFix available

CVE-2006-4980 is a high vulnerability (CVSS 7.5) in Python, published October 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.61%, the 93rd percentile. Fixed in python2.4 2.4.1-2sarge1.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
5.61%EPSS, 93rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.4.1-2sarge1python2.4 +54 more

Description

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

Exploit likelihood

5.61%Up 1.4 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python-py
Azure Linux:3
through 1.11.0-1None known
python2.4
Debian:3.1
before 2.4.1-2sarge1, plus listed versions
2.4.1-2
2.4.1-2sarge1
python2.3
Debian:3.1
before 2.3.5-3sarge2, plus listed versions
2.3.5-32.3.5-3sarge1
2.3.5-3sarge2
python
Red Hat:enterprise_linux:3::as
before 0:2.2.3-6.5
0:2.2.3-6.5
python-debuginfo
Red Hat:enterprise_linux:3::as
before 0:2.2.3-6.5
0:2.2.3-6.5
python-devel
Red Hat:enterprise_linux:3::as
before 0:2.2.3-6.5
0:2.2.3-6.5
python-tools
Red Hat:enterprise_linux:3::as
before 0:2.2.3-6.5
0:2.2.3-6.5
tkinter
Red Hat:enterprise_linux:3::as
before 0:2.2.3-6.5
0:2.2.3-6.5
python
Red Hat:enterprise_linux:3::desktop
before 0:2.2.3-6.5
0:2.2.3-6.5
python-debuginfo
Red Hat:enterprise_linux:3::desktop
before 0:2.2.3-6.5
0:2.2.3-6.5
Show 45 moreShow less
Affected packages
PackageAffectedFixed
python-devel
Red Hat:enterprise_linux:3::desktop
before 0:2.2.3-6.5
0:2.2.3-6.5
python-tools
Red Hat:enterprise_linux:3::desktop
before 0:2.2.3-6.5
0:2.2.3-6.5
tkinter
Red Hat:enterprise_linux:3::desktop
before 0:2.2.3-6.5
0:2.2.3-6.5
python
Red Hat:enterprise_linux:3::es
before 0:2.2.3-6.5
0:2.2.3-6.5
python-debuginfo
Red Hat:enterprise_linux:3::es
before 0:2.2.3-6.5
0:2.2.3-6.5
python-devel
Red Hat:enterprise_linux:3::es
before 0:2.2.3-6.5
0:2.2.3-6.5
python-tools
Red Hat:enterprise_linux:3::es
before 0:2.2.3-6.5
0:2.2.3-6.5
tkinter
Red Hat:enterprise_linux:3::es
before 0:2.2.3-6.5
0:2.2.3-6.5
python
Red Hat:enterprise_linux:3::ws
before 0:2.2.3-6.5
0:2.2.3-6.5
python-debuginfo
Red Hat:enterprise_linux:3::ws
before 0:2.2.3-6.5
0:2.2.3-6.5
python-devel
Red Hat:enterprise_linux:3::ws
before 0:2.2.3-6.5
0:2.2.3-6.5
python-tools
Red Hat:enterprise_linux:3::ws
before 0:2.2.3-6.5
0:2.2.3-6.5
tkinter
Red Hat:enterprise_linux:3::ws
before 0:2.2.3-6.5
0:2.2.3-6.5
python
Red Hat:enterprise_linux:4::as
before 0:2.3.4-14.3
0:2.3.4-14.3
python-debuginfo
Red Hat:enterprise_linux:4::as
before 0:2.3.4-14.3
0:2.3.4-14.3
python-devel
Red Hat:enterprise_linux:4::as
before 0:2.3.4-14.3
0:2.3.4-14.3
python-docs
Red Hat:enterprise_linux:4::as
before 0:2.3.4-14.3
0:2.3.4-14.3
python-tools
Red Hat:enterprise_linux:4::as
before 0:2.3.4-14.3
0:2.3.4-14.3
tkinter
Red Hat:enterprise_linux:4::as
before 0:2.3.4-14.3
0:2.3.4-14.3
python
Red Hat:enterprise_linux:4::desktop
before 0:2.3.4-14.3
0:2.3.4-14.3
python-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:2.3.4-14.3
0:2.3.4-14.3
python-devel
Red Hat:enterprise_linux:4::desktop
before 0:2.3.4-14.3
0:2.3.4-14.3
python-docs
Red Hat:enterprise_linux:4::desktop
before 0:2.3.4-14.3
0:2.3.4-14.3
python-tools
Red Hat:enterprise_linux:4::desktop
before 0:2.3.4-14.3
0:2.3.4-14.3
tkinter
Red Hat:enterprise_linux:4::desktop
before 0:2.3.4-14.3
0:2.3.4-14.3
python
Red Hat:enterprise_linux:4::es
before 0:2.3.4-14.3
0:2.3.4-14.3
python-debuginfo
Red Hat:enterprise_linux:4::es
before 0:2.3.4-14.3
0:2.3.4-14.3
python-devel
Red Hat:enterprise_linux:4::es
before 0:2.3.4-14.3
0:2.3.4-14.3
python-docs
Red Hat:enterprise_linux:4::es
before 0:2.3.4-14.3
0:2.3.4-14.3
python-tools
Red Hat:enterprise_linux:4::es
before 0:2.3.4-14.3
0:2.3.4-14.3
tkinter
Red Hat:enterprise_linux:4::es
before 0:2.3.4-14.3
0:2.3.4-14.3
python
Red Hat:enterprise_linux:4::ws
before 0:2.3.4-14.3
0:2.3.4-14.3
python-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:2.3.4-14.3
0:2.3.4-14.3
python-devel
Red Hat:enterprise_linux:4::ws
before 0:2.3.4-14.3
0:2.3.4-14.3
python-docs
Red Hat:enterprise_linux:4::ws
before 0:2.3.4-14.3
0:2.3.4-14.3
python-tools
Red Hat:enterprise_linux:4::ws
before 0:2.3.4-14.3
0:2.3.4-14.3
tkinter
Red Hat:enterprise_linux:4::ws
before 0:2.3.4-14.3
0:2.3.4-14.3
rhn-solaris-bootstrap
Red Hat:network_satellite:5.0:el4
From an advisory covering 12 CVEs
before 0:5.0.2-3
0:5.0.2-3
rhn_solaris_bootstrap_5_0_2_3
Red Hat:network_satellite:5.0:el4
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
rhn-solaris-bootstrap
Red Hat:network_satellite:4.2::el3
From an advisory covering 12 CVEs
before 0:5.0.2-3
0:5.0.2-3
rhn_solaris_bootstrap_5_0_2_3
Red Hat:network_satellite:4.2::el3
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
rhn-solaris-bootstrap
Red Hat:network_satellite:4.2::el4
From an advisory covering 12 CVEs
before 0:5.0.2-3
0:5.0.2-3
rhn_solaris_bootstrap_5_0_2_3
Red Hat:network_satellite:4.2::el4
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
rhn-solaris-bootstrap
Red Hat:network_satellite:5.1::el4
From an advisory covering 12 CVEs
before 0:5.1.1-3
0:5.1.1-3
rhn_solaris_bootstrap_5_1_1_3
Red Hat:network_satellite:5.1::el4
From an advisory covering 12 CVEs
before 0:1-0
0:1-0

What each source reports

NVD Score used7.5

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

Record
CVE-2006-4980
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

Record
CVE-2006-4980
Updated
2026-11-02
EUVDEUVD-2006-4966No score

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

Record
EUVD-2006-4966
Updated
2026-11-03
GitHub AdvisoriesGHSA-7rjj-4jxg-6hg5No score

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context...

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

Record
GHSA-7rjj-4jxg-6hg5
Updated
2026-11-02
OSVRHSA-2008:02649.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Record
RHSA-2008:0264
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2008:05259.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Record
RHSA-2008:0525
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2008:06299.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Record
RHSA-2008:0629
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVAZL-109551No score

CVE-2006-4980 affecting package python-py 1.11.0-1

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

Record
AZL-109551
Updated
2026-11-02

History

History
RecordedChangedSources
referencesOSV
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 92 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open