Debian/tidy-html5: high 7.5
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" process
Action: Upgrade tidy-html5 to 2:5.6.0-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:5.6.0-3 | - |
Fixed versions
| 2:5.6.0-3 |
Sources
- osv: DEBIAN-CVE-2017-17497#Debian:13/tidy-html5
- https://security-tracker.debian.org/tracker/CVE-2017-17497
published · modified · JSON