Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-13692

Опубликовано: 25 авг. 2017
Источник: debian
EPSS Низкий

Описание

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
tidy-html5not-affectedpackage
tidynot-affectedpackage

Примечания

  • https://github.com/htacg/tidy-html5/issues/588

EPSS

Процентиль: 49%
0.00257
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 8 лет назад

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.

CVSS3: 3.3
redhat
больше 8 лет назад

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.

CVSS3: 7.5
nvd
больше 8 лет назад

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.

CVSS3: 7.5
github
больше 3 лет назад

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.

EPSS

Процентиль: 49%
0.00257
Низкий