Tidy CVE-2017-13692 Denial of Service Vulnerability

Bugtraq ID:	100506
Class:	Unknown
CVE:	CVE-2017-11544 CVE-2017-13692
Remote:	Yes
Local:	No
Published:	Aug 24 2017 12:00AM
Updated:	Apr 12 2019 10:00PM
Credit:	MayfeelYang
Vulnerable:	HTACG Tidy 5.5.31
Not Vulnerable:

Tidy CVE-2017-13692 Denial of Service Vulnerability

Tidy is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause applications to crash with a segmentation fault, denying service to legitimate users.

Tidy 5.5.31 is vulnerable; other versions may also be affected.

Tidy CVE-2017-13692 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Tidy CVE-2017-13692 Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Tidy CVE-2017-13692 Denial of Service Vulnerability

References:

• [bug] Segmentation Fault #588 (Htacg)
  
• Bug 1485857 - (CVE-2017-13692) CVE-2017-13692 tidy: Segfault due to out-of-bound (Red Hat)
  
• CVE-2017-13692 (Red Hat)
  
• Tidy Home Page (HTACG)