92 lines
2.3 KiB
JSON
92 lines
2.3 KiB
JSON
{
|
|
"schema_version": "1.7.0",
|
|
"id": "USN-2695-1",
|
|
"summary": "tidy vulnerabilities",
|
|
"details": "Fernando Mu\u00f1oz discovered that HTML Tidy incorrectly handled memory. If a\nuser or automated system were tricked into processing specially crafted\ndata, applications linked against HTML Tidy could be made to crash, leading\nto a denial of service, or possibly execute arbitrary code.\n",
|
|
"aliases": [],
|
|
"upstream": [
|
|
"UBUNTU-CVE-2015-5522",
|
|
"UBUNTU-CVE-2015-5523"
|
|
],
|
|
"related": [],
|
|
"published": "2015-07-29T18:24:15Z",
|
|
"modified": "2026-04-22T07:36:32Z",
|
|
"affected": [
|
|
{
|
|
"package": {
|
|
"ecosystem": "Ubuntu:14.04:LTS",
|
|
"name": "tidy",
|
|
"purl": "pkg:deb/ubuntu/tidy@20091223cvs-1.2ubuntu1.1?arch=source&distro=trusty"
|
|
},
|
|
"ranges": [
|
|
{
|
|
"type": "ECOSYSTEM",
|
|
"events": [
|
|
{
|
|
"introduced": "0"
|
|
},
|
|
{
|
|
"fixed": "20091223cvs-1.2ubuntu1.1"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"versions": [
|
|
"20091223cvs-1.2",
|
|
"20091223cvs-1.2ubuntu1"
|
|
],
|
|
"ecosystem_specific": {
|
|
"binaries": [
|
|
{
|
|
"binary_name": "libtidy-0.99-0",
|
|
"binary_version": "20091223cvs-1.2ubuntu1.1"
|
|
},
|
|
{
|
|
"binary_name": "tidy",
|
|
"binary_version": "20091223cvs-1.2ubuntu1.1"
|
|
}
|
|
],
|
|
"availability": "No subscription required"
|
|
},
|
|
"database_specific": {
|
|
"cves_map": {
|
|
"ecosystem": "Ubuntu:14.04:LTS",
|
|
"cves": [
|
|
{
|
|
"id": "CVE-2015-5522",
|
|
"severity": [
|
|
{
|
|
"type": "Ubuntu",
|
|
"score": "medium"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "CVE-2015-5523",
|
|
"severity": [
|
|
{
|
|
"type": "Ubuntu",
|
|
"score": "low"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"type": "ADVISORY",
|
|
"url": "https://ubuntu.com/security/notices/USN-2695-1"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2015-5522"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2015-5523"
|
|
}
|
|
]
|
|
} |