CVE-2005-2491

Published: Aug 22, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

OpenPKG-SA-2005.018

vendor-advisory

x_refsource_OPENPKG

http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf

x_refsource_CONFIRM

22691

third-party-advisory

x_refsource_SECUNIA

17813

third-party-advisory

x_refsource_SECUNIA

ADV-2006-4502

vdb-entry

x_refsource_VUPEN

GLSA-200509-08

vendor-advisory

x_refsource_GENTOO

http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm

x_refsource_CONFIRM

14620

vdb-entry

x_refsource_BID

ADV-2005-2659

vdb-entry

x_refsource_VUPEN

FLSA:168516

vendor-advisory

x_refsource_FEDORA

GLSA-200509-02

vendor-advisory

x_refsource_GENTOO

TSLSA-2005-0059

vendor-advisory

x_refsource_TRUSTIX

22875

third-party-advisory

x_refsource_SECUNIA

SSRT061238

vendor-advisory

x_refsource_HP

SSRT090208

vendor-advisory

x_refsource_HP

HPSBMA02159

vendor-advisory

x_refsource_HP

oval:org.mitre.oval:def:1659

vdb-entry

signature

x_refsource_OVAL

http://www.ethereal.com/appnotes/enpa-sa-00021.html

x_refsource_CONFIRM

SUSE-SA:2005:051

vendor-advisory

x_refsource_SUSE

16502

third-party-advisory

x_refsource_SECUNIA

SSRT051251

vendor-advisory

x_refsource_HP

21522

third-party-advisory

x_refsource_SECUNIA

16679

third-party-advisory

x_refsource_SECUNIA

DSA-817

vendor-advisory

x_refsource_DEBIAN

GLSA-200508-17

vendor-advisory

x_refsource_GENTOO

ADV-2005-1511

vdb-entry

x_refsource_VUPEN

604

third-party-advisory

x_refsource_SREASON

1014744

vdb-entry

x_refsource_SECTRACK

HPSBUX02074

vendor-advisory

x_refsource_HP

http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf

x_refsource_CONFIRM

APPLE-SA-2005-11-29

vendor-advisory

x_refsource_APPLE

RHSA-2005:761

vendor-advisory

x_refsource_REDHAT

SUSE-SA:2005:049

vendor-advisory

x_refsource_SUSE

DSA-819

vendor-advisory

x_refsource_DEBIAN

ADV-2006-4320

vdb-entry

x_refsource_VUPEN

RHSA-2005:358

vendor-advisory

x_refsource_REDHAT

oval:org.mitre.oval:def:1496

vdb-entry

signature

x_refsource_OVAL

DSA-821

vendor-advisory

x_refsource_DEBIAN

HPSBOV02683

vendor-advisory

x_refsource_HP

19072

third-party-advisory

x_refsource_SECUNIA

19532

third-party-advisory

x_refsource_SECUNIA

http://www.php.net/release_4_4_1.php

x_refsource_CONFIRM

GLSA-200509-19

vendor-advisory

x_refsource_GENTOO

oval:org.mitre.oval:def:11516

vdb-entry

signature

x_refsource_OVAL

17252

third-party-advisory

x_refsource_SECUNIA

GLSA-200509-12

vendor-advisory

x_refsource_GENTOO

SUSE-SA:2005:052

vendor-advisory

x_refsource_SUSE

oval:org.mitre.oval:def:735

vdb-entry

signature

x_refsource_OVAL

15647

vdb-entry

x_refsource_BID

http://support.avaya.com/elmodocs2/security/ASA-2006-159.htm

x_refsource_CONFIRM

DSA-800

vendor-advisory

x_refsource_DEBIAN

19193

third-party-advisory

x_refsource_SECUNIA

102198

vendor-advisory

x_refsource_SUNALERT

SUSE-SA:2005:048

vendor-advisory

x_refsource_SUSE

RHSA-2006:0197

vendor-advisory

x_refsource_REDHAT

ADV-2006-0789

vdb-entry

x_refsource_VUPEN

[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073139 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1888194 [3/13] - /httpd/site/trunk/content/security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2005-2491

Description

Affected Products

References