CVE-2005-2491

Description

Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.

7.5
CVSS
Severity: High
CVSS 2.0 •
EPSS 1.91% Top 20%
Vendor Advisory marc.info Vendor Advisory gentoo.org Vendor Advisory sgi.com Vendor Advisory securityfocus.com Vendor Advisory gentoo.org Vendor Advisory trustix.org Vendor Advisory hp.com Vendor Advisory marc.info Vendor Advisory marc.info Vendor Advisory securityfocus.com Vendor Advisory debian.org Vendor Advisory gentoo.org Vendor Advisory apple.com Vendor Advisory redhat.com Vendor Advisory novell.com Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory gentoo.org Vendor Advisory gentoo.org Vendor Advisory novell.com Vendor Advisory debian.org Vendor Advisory sco.com Vendor Advisory sun.com Vendor Advisory novell.com Vendor Advisory redhat.com
Affected: n/a n/a
Published at:
Updated at:

References

Link Tags
http://marc.info/?l=bugtraq&m=112606064317223&w=2 vendor advisory
http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf
http://secunia.com/advisories/22691 third party advisory
http://secunia.com/advisories/17813 third party advisory
http://www.vupen.com/english/advisories/2006/4502 vdb entry
http://www.gentoo.org/security/en/glsa/glsa-200509-08.xml vendor advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm
ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U vendor advisory
http://www.securityfocus.com/bid/14620 vdb entry
http://www.vupen.com/english/advisories/2005/2659 vdb entry
http://www.securityfocus.com/archive/1/427046/100/0/threaded vendor advisory
http://www.gentoo.org/security/en/glsa/glsa-200509-02.xml vendor advisory
http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html vendor advisory
http://secunia.com/advisories/22875 third party advisory
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 vendor advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2 vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1659 vdb entry signature
http://www.ethereal.com/appnotes/enpa-sa-00021.html url repurposed
http://marc.info/?l=bugtraq&m=112605112027335&w=2 vendor advisory
http://secunia.com/advisories/16502 third party advisory
http://www.securityfocus.com/archive/1/428138/100/0/threaded vendor advisory
http://secunia.com/advisories/21522 third party advisory
http://secunia.com/advisories/16679 third party advisory
http://www.debian.org/security/2005/dsa-817 vendor advisory
http://www.gentoo.org/security/en/glsa/glsa-200508-17.xml vendor advisory
http://www.vupen.com/english/advisories/2005/1511 vdb entry
http://securityreason.com/securityalert/604 third party advisory
http://securitytracker.com/id?1014744 vdb entry patch
http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf
http://docs.info.apple.com/article.html?artnum=302847 vendor advisory
http://www.redhat.com/support/errata/RHSA-2005-761.html vendor advisory
http://www.novell.com/linux/security/advisories/2005_49_php.html vendor advisory
http://www.debian.org/security/2005/dsa-819 vendor advisory
http://www.vupen.com/english/advisories/2006/4320 vdb entry
http://www.redhat.com/support/errata/RHSA-2005-358.html vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1496 vdb entry signature
http://www.debian.org/security/2005/dsa-821 vendor advisory
http://secunia.com/advisories/19072 third party advisory
http://secunia.com/advisories/19532 third party advisory
http://www.php.net/release_4_4_1.php
http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11516 vdb entry signature
http://secunia.com/advisories/17252 third party advisory
http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml vendor advisory
http://www.novell.com/linux/security/advisories/2005_52_apache2.html vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A735 vdb entry signature
http://www.securityfocus.com/bid/15647 vdb entry
http://support.avaya.com/elmodocs2/security/ASA-2006-159.htm
http://www.debian.org/security/2005/dsa-800 vendor advisory
http://secunia.com/advisories/19193 third party advisory
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt vendor advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 vendor advisory
http://www.novell.com/linux/security/advisories/2005_48_pcre.html vendor advisory
http://www.redhat.com/support/errata/RHSA-2006-0197.html vendor advisory
http://www.vupen.com/english/advisories/2006/0789 vdb entry
https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E mailing list
https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E mailing list

Frequently Asked Questions

What is the severity of CVE-2005-2491?
CVE-2005-2491 has been scored as a high severity vulnerability.
How to fix CVE-2005-2491?
To fix CVE-2005-2491, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-2491 being actively exploited in the wild?
It is possible that CVE-2005-2491 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.