CVE-2015-5523
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a...
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
Exploit likelihood
What each source reports
NVD Score used
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
- Record
CVE-2015-5523- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
- Record
CVE-2015-5523- Updated
- 2026-11-02
EUVDEUVD-2015-5478 No score
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
- Record
EUVD-2015-5478- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v5vg-qv4w-24wv No score
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a...
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
- Record
GHSA-v5vg-qv4w-24wv- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10210-1 No score
libtidy-devel-5.2.0-2.3 on GA media
These are all security issues fixed in the libtidy-devel-5.2.0-2.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10210-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1513-1 No score
Security update for tidy
This update fixes two heap-based buffer overflows in tidy/libtidy. These vulnerabilities could allow remote attackers to cause a denial of service (crash) via vectors involving a command character in an href. (CVE-2015-5522, CVE-2015-5523)
- Record
SUSE-SU-2015:1513-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1525-1 No score
Security update for tidy
This update fixes two heap-based buffer overflows in tidy/libtidy. These vulnerabilities could allow remote attackers to cause a denial of service (crash) via vectors involving a command character in an href. (CVE-2015-5522, CVE-2015-5523)
- Record
SUSE-SU-2015:1525-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-5523 No score
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
- Record
UBUNTU-CVE-2015-5523- Updated
- 2026-11-02
OSVUSN-2695-1 No score
tidy vulnerabilities
Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications linked against HTML Tidy could be made to crash, leading to a denial of service, or possibly execute arbitrary code.
- Record
USN-2695-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tidyDebian:6.0 From an advisory covering 2 CVEs |
before 20091223cvs-1+deb6u1, plus listed versions 20091223cvs-1 |
20091223cvs-1+deb6u1 |
tidyDebian:7 From an advisory covering 2 CVEs |
before 20091223cvs-1.2+deb7u1, plus listed versions 20091223cvs-1.2 |
20091223cvs-1.2+deb7u1 |
tidyDebian:8 From an advisory covering 2 CVEs |
before 20091223cvs-1.4+deb8u1, plus listed versions 20091223cvs-1.4 |
20091223cvs-1.4+deb8u1 |
tidySUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 2 CVEs |
before 1.0.20100204cvs-25.3 | 1.0.20100204cvs-25.3 |
tidySUSE:Linux Enterprise Software Development Kit 11 SP3 From an advisory covering 2 CVEs |
before 1.0-37.1 | 1.0-37.1 |
tidySUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 2 CVEs |
before 1.0-37.1 | 1.0-37.1 |
tidySUSE:Linux Enterprise Desktop 11 SP3 From an advisory covering 2 CVEs |
before 1.0-37.1 | 1.0-37.1 |
tidySUSE:Linux Enterprise Desktop 11 SP4 From an advisory covering 2 CVEs |
before 1.0-37.1 | 1.0-37.1 |
tidyUbuntu:14.04:LTS |
before 20091223cvs-1.2ubuntu1.1, plus listed versions 20091223cvs-1.220091223cvs-1.2ubuntu1 |
20091223cvs-1.2ubuntu1.1 |
tidyUbuntu:14.04:LTS From an advisory covering 2 CVEs |
before 20091223cvs-1.2ubuntu1.1, plus listed versions 20091223cvs-1.220091223cvs-1.2ubuntu1 |
20091223cvs-1.2ubuntu1.1 |
tidyopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 5.2.0-2.3 | 5.2.0-2.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-5523 is a medium vulnerability (CVSS 4.3) in Htacg Tidy, published July 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.84%, the 90th percentile. Fixed in tidy 20091223cvs-1.2ubuntu1.1.
References
securitytracker.com/id/1033703
openwall.com/lists/oss-security/2015/07/13/7
support.apple.com/HT205212
lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
ubuntu.com/usn/USN-2695-1
Show 21 moreShow less
debian.org/security/2015/dsa-3309
github.com/htacg/tidy-html5/issues/217
securityfocus.com/bid/75037
nvd.nist.gov/vuln/detail/CVE-2015-5523
suse.com/support/update/announcement/2015/suse-su-20151513-1
bugzilla.suse.com/903962
ubuntu.com/security/CVE-2015-5523
cve.org/CVERecord?id=CVE-2015-5523