Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Httpd | — | Upgrade to Apache HTTPD version 2.0.55 | Apr 12, 2012 | Aug 23, 2005 |
| Apple Osx Safari | — | Apply OS X security update 2005-009 | Dec 16, 2011 | Aug 23, 2005 |
| Debian | — | Upgrade gofficeUpgrade pcre3Upgrade gnumeric | Jul 30, 2024 | Aug 23, 2005 |
| Freebsd | — | Upgrade pcreUpgrade pcre-utf8 | Dec 10, 2025 | Aug 26, 2005 |
| Gentoo Linux | — | Upgrade net-www/mod_ssl.Upgrade dev-lang/python.Upgrade dev-php/php-cgi.Upgrade dev-php/php.Upgrade dev-php/mod_php.Upgrade app-office/gnumeric.Upgrade dev-libs/libpcre.Upgrade www-servers/apache. | Oct 30, 2017 | Aug 23, 2005 |
| Hpux | — | Apply patch PHSS_34123 from HPApply patch PHSS_34163 from HPApply the remediation from HP for CVE-2005-2491 | Aug 11, 2017 | Aug 23, 2005 |
| Suse | — | Upgrade pcre-64bitUpgrade php4-exifUpgrade php4-develUpgrade apache2-develUpgrade php4-mysqlUpgrade mod_php4-servletUpgrade python-demoUpgrade apache2-preforkUpgrade python-cursesUpgrade php4-pearUpgrade pcre-develUpgrade python-64bitUpgrade libapr0Upgrade apache2-mod_php4Upgrade python-x86Upgrade python-xmlUpgrade python-develUpgrade php4-sysvshmUpgrade pcre-x86Upgrade pythonUpgrade apache-mod_php4Upgrade apache2Upgrade python-mpzUpgrade python-gdbmUpgrade pcreUpgrade python-docUpgrade python-tkUpgrade php4-sessionUpgrade python-doc-pdfUpgrade python-32bitUpgrade pcre-32bitUpgrade mod_php4-coreUpgrade apache2-workerUpgrade php4-fastcgiUpgrade php4-imapUpgrade python-idle | Feb 17, 2015 | Aug 23, 2005 |
| Ubuntu | — | Upgrade apache2-mpm-workerUpgrade apache2-mpm-preforkUpgrade python2.1Upgrade gnumericUpgrade libpcre3 | Nov 8, 2024 | Aug 23, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub