CVE-2005-2491
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as...
7.5 HighFix available
CVE-2005-2491 is a high vulnerability (CVSS 7.5) in Pcre, published August 22, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.34%, the 91st percentile. Fixed in gnumeric 1.5.1-1.
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
Exploit likelihood
4.34%Down 1.3 points since Feb 4, 2022
What each source reports
NVD Score used
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
- Record
CVE-2005-2491- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
- Record
CVE-2005-2491- Updated
- 2026-11-02
EUVDEUVD-2005-2492 No score
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
- Record
EUVD-2005-2492- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h9j2-347v-3v58 No score
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as...
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
- Record
GHSA-h9j2-347v-3v58- Updated
- 2026-11-02
OSV No score
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
- Record
CVE-2005-2491- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2491 No score
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
- Record
DEBIAN-CVE-2005-2491- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnumericDebian:12 |
before 1.5.1-1 | 1.5.1-1 |
gnumericDebian:13 |
before 1.5.1-1 | 1.5.1-1 |
gnumericDebian:14 |
before 1.5.1-1 | 1.5.1-1 |
gofficeDebian:12 |
before 0.1.0-3 | 0.1.0-3 |
gofficeDebian:13 |
before 0.1.0-3 | 0.1.0-3 |
gofficeDebian:14 |
before 0.1.0-3 | 0.1.0-3 |
pcre3Debian:12 |
before 6.3-1 | 6.3-1 |
pcre3Debian:3.0 |
before 3.4-1.1woody1, plus listed versions 3.4-1.1 |
3.4-1.1woody1 |
pcre3Debian:3.1 |
before 4.5-1.2sarge1, plus listed versions 4.5-1.2 |
4.5-1.2sarge1 |
python2.2Debian:3.0 |
before 2.2.1-4.8, plus listed versions 2.2.1-4.62.2.1-4.7 |
2.2.1-4.8 |
Show 93 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python2.2Debian:3.1 |
before 2.2.3dfsg-2sarge1, plus listed versions 2.2.3dfsg-2 |
2.2.3dfsg-2sarge1 |
python2.1Debian:3.0 |
before 2.1.3-3.4, plus listed versions 2.1.3-32.1.3-3.2 |
2.1.3-3.4 |
python2.1Debian:3.1 |
before 2.1.3dfsg-1sarge1, plus listed versions 2.1.3dfsg-1 |
2.1.3dfsg-1sarge1 |
python2.3Debian:3.1 |
before 2.3.5-3sarge1, plus listed versions 2.3.5-3 |
2.3.5-3sarge1 |
pcre3Debian:4.0 |
before 6.3-0.1etch1 | 6.3-0.1etch1 |
eximRed Hat:enterprise_linux:4::as |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-docRed Hat:enterprise_linux:4::as |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-monRed Hat:enterprise_linux:4::as |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-saRed Hat:enterprise_linux:4::as |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
eximRed Hat:enterprise_linux:4::desktop |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-docRed Hat:enterprise_linux:4::desktop |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-monRed Hat:enterprise_linux:4::desktop |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-saRed Hat:enterprise_linux:4::desktop |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
eximRed Hat:enterprise_linux:4::es |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-docRed Hat:enterprise_linux:4::es |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-monRed Hat:enterprise_linux:4::es |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-saRed Hat:enterprise_linux:4::es |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
eximRed Hat:enterprise_linux:4::ws |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-docRed Hat:enterprise_linux:4::ws |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-monRed Hat:enterprise_linux:4::ws |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
exim-saRed Hat:enterprise_linux:4::ws |
before 0:4.43-1.RHEL4.5 | 0:4.43-1.RHEL4.5 |
pcreRed Hat:enterprise_linux:3::as |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcre-debuginfoRed Hat:enterprise_linux:3::as |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcre-develRed Hat:enterprise_linux:3::as |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcreRed Hat:enterprise_linux:3::desktop |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcre-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcre-develRed Hat:enterprise_linux:3::desktop |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcreRed Hat:enterprise_linux:3::es |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcre-debuginfoRed Hat:enterprise_linux:3::es |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcre-develRed Hat:enterprise_linux:3::es |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcreRed Hat:enterprise_linux:3::ws |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcre-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcre-develRed Hat:enterprise_linux:3::ws |
before 0:3.9-10.2 | 0:3.9-10.2 |
pcreRed Hat:enterprise_linux:4::as |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcre-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcre-develRed Hat:enterprise_linux:4::as |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcreRed Hat:enterprise_linux:4::desktop |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcre-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcre-develRed Hat:enterprise_linux:4::desktop |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcreRed Hat:enterprise_linux:4::es |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcre-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcre-develRed Hat:enterprise_linux:4::es |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcreRed Hat:enterprise_linux:4::ws |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcre-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pcre-develRed Hat:enterprise_linux:4::ws |
before 0:4.5-3.2.RHEL4 | 0:4.5-3.2.RHEL4 |
pythonRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-develRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-toolsRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
tkinterRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
pythonRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-develRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-toolsRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
tkinterRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
pythonRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-develRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-toolsRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
tkinterRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
pythonRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-develRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
python-toolsRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
tkinterRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.2 | 0:2.2.3-6.2 |
pythonRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-develRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-docsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-toolsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
tkinterRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
pythonRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-develRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-docsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-toolsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
tkinterRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
pythonRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-develRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-docsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-toolsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
tkinterRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
pythonRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-develRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-docsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
python-toolsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
tkinterRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.2 | 0:2.3.4-14.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
marc.info?l=bugtraq&m=112606064317223&w=2
support.avaya.com/elmodocs2/security/ASA-2005-216.pdf
secunia.com/advisories/22691
vupen.com/english/advisories/2006/4502
gentoo.org/security/en/glsa/glsa-200509-08.xml
Show 87 moreShow less
securityfocus.com/bid/14620
lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
itrc.hp.com/service/cki/docDisplay.do?docId=c00786522
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1659
ethereal.com/appnotes/enpa-sa-00021.html
debian.org/security/2005/dsa-817
securityreason.com/securityalert/604
securitytracker.com/id?1014744
docs.info.apple.com/article.html?artnum=302847
redhat.com/support/errata/RHSA-2005-761.html
novell.com/linux/security/advisories/2005_49_php.html
php.net/release_4_4_1.php
sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2005-2491
github.com/advisories/GHSA-h9j2-347v-3v58
security-tracker.debian.org/tracker/CVE-2005-2491
access.redhat.com/errata/RHSA-2005:358
bugzilla.redhat.com/show_bug.cgi?id=166332
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_358.json
cve.org/CVERecord?id=CVE-2005-2491