CVE-2015-5523
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a...
CVE-2015-5523 is a medium vulnerability (CVSS 4.3) in Htacg Tidy, published July 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.84%, the 90th percentile. Fixed in tidy 20091223cvs-1.2ubuntu1.1.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 3.84%EPSS, 90th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
20091223cvs-1.2ubuntu1.1tidy +10 more
Description
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tidyDebian:6.0 From an advisory covering 2 CVEs | before 20091223cvs-1+deb6u1, plus listed versions 20091223cvs-1 | 20091223cvs-1+deb6u1 |
tidyDebian:7 From an advisory covering 2 CVEs | before 20091223cvs-1.2+deb7u1, plus listed versions 20091223cvs-1.2 | 20091223cvs-1.2+deb7u1 |
tidyDebian:8 From an advisory covering 2 CVEs | before 20091223cvs-1.4+deb8u1, plus listed versions 20091223cvs-1.4 | 20091223cvs-1.4+deb8u1 |
tidySUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 2 CVEs | before 1.0.20100204cvs-25.3 | 1.0.20100204cvs-25.3 |
tidySUSE:Linux Enterprise Software Development Kit 11 SP3 From an advisory covering 2 CVEs | before 1.0-37.1 | 1.0-37.1 |
tidySUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 2 CVEs | before 1.0-37.1 | 1.0-37.1 |
tidySUSE:Linux Enterprise Desktop 11 SP3 From an advisory covering 2 CVEs | before 1.0-37.1 | 1.0-37.1 |
tidySUSE:Linux Enterprise Desktop 11 SP4 From an advisory covering 2 CVEs | before 1.0-37.1 | 1.0-37.1 |
tidyUbuntu:14.04:LTS | before 20091223cvs-1.2ubuntu1.1, plus listed versions 20091223cvs-1.220091223cvs-1.2ubuntu1 | 20091223cvs-1.2ubuntu1.1 |
tidyUbuntu:14.04:LTS From an advisory covering 2 CVEs | before 20091223cvs-1.2ubuntu1.1, plus listed versions 20091223cvs-1.220091223cvs-1.2ubuntu1 | 20091223cvs-1.2ubuntu1.1 |
tidyopenSUSE:Tumbleweed From an advisory covering 3 CVEs | before 5.2.0-2.3 | 5.2.0-2.3 |
What each source reports
NVD Score used
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
- Record
CVE-2015-5523- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
- Record
CVE-2015-5523- Updated
- 2026-11-02
EUVDEUVD-2015-5478No score
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
- Record
EUVD-2015-5478- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v5vg-qv4w-24wvNo score
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a...
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
- Record
GHSA-v5vg-qv4w-24wv- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10210-1No score
libtidy-devel-5.2.0-2.3 on GA media
These are all security issues fixed in the libtidy-devel-5.2.0-2.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10210-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1513-1No score
Security update for tidy
This update fixes two heap-based buffer overflows in tidy/libtidy. These vulnerabilities could allow remote attackers to cause a denial of service (crash) via vectors involving a command character in an href. (CVE-2015-5522, CVE-2015-5523)
- Record
SUSE-SU-2015:1513-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1525-1No score
Security update for tidy
This update fixes two heap-based buffer overflows in tidy/libtidy. These vulnerabilities could allow remote attackers to cause a denial of service (crash) via vectors involving a command character in an href. (CVE-2015-5522, CVE-2015-5523)
- Record
SUSE-SU-2015:1525-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-5523No score
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
- Record
UBUNTU-CVE-2015-5523- Updated
- 2026-11-02
OSVUSN-2695-1No score
tidy vulnerabilities
Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications linked against HTML Tidy could be made to crash, leading to a denial of service, or possibly execute arbitrary code.
- Record
USN-2695-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id/1033703
openwall.com/lists/oss-security/2015/07/13/7
support.apple.com/HT205212
lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
ubuntu.com/usn/USN-2695-1
Show 21 moreShow less
debian.org/security/2015/dsa-3309
github.com/htacg/tidy-html5/issues/217
securityfocus.com/bid/75037
nvd.nist.gov/vuln/detail/CVE-2015-5523
suse.com/support/update/announcement/2015/suse-su-20151513-1
bugzilla.suse.com/903962
ubuntu.com/security/CVE-2015-5523
cve.org/CVERecord?id=CVE-2015-5523