CVE-2015-5523 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-5523 Interim 1 31 2025-11-05T04:46:02Z current 2021-05-30T13:32:14Z 2025-11-05T04:46:02Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-5523 The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-September/001580.html E-Mail link for SUSE-SU-2015:1513-1 https://lists.suse.com/pipermail/sle-security-updates/2015-September/001586.html E-Mail link for SUSE-SU-2015:1525-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 openSUSE Tumbleweed libtidy-0_99-0-1.0.20100204cvs-25.3 libtidy-0_99-0-devel-1.0.20100204cvs-25.3 libtidy-1.0-37.1 libtidy-devel-1.0-37.1 libtidy-devel-5.2.0-2.3 libtidy-devel-5.4.0-1.34 libtidy-devel-5.4.0-3.2.1 libtidy-devel-5.8.0-160000.2.2 libtidy5-5.2.0-2.3 libtidy5-5.4.0-1.34 libtidy5-5.4.0-3.2.1 libtidy58-5.8.0-160000.2.2 tidy-1.0-37.1 tidy-1.0.20100204cvs-25.3 tidy-5.2.0-2.3 tidy-5.4.0-1.34 tidy-5.4.0-3.2.1 tidy-5.8.0-160000.2.2 tidy-doc-5.2.0-2.3 tidy-doc-5.8.0-160000.2.2 libtidy-1.0-37.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libtidy-1.0-37.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 libtidy5-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libtidy5-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libtidy5-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libtidy5-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libtidy5-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libtidy5-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libtidy-devel-5.4.0-1.34 as a component of SUSE Linux Enterprise Module for Development Tools 15 libtidy5-5.4.0-1.34 as a component of SUSE Linux Enterprise Module for Development Tools 15 tidy-5.4.0-1.34 as a component of SUSE Linux Enterprise Module for Development Tools 15 libtidy-devel-5.4.0-1.34 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 libtidy5-5.4.0-1.34 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 tidy-5.4.0-1.34 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 libtidy-devel-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 tidy-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 libtidy-devel-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 tidy-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 libtidy-devel-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 tidy-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 libtidy-devel-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 tidy-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 libtidy-devel-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 tidy-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 libtidy-devel-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 tidy-5.4.0-3.2.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 libtidy-devel-5.8.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libtidy58-5.8.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 tidy-5.8.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 tidy-doc-5.8.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libtidy-1.0-37.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 libtidy-devel-1.0-37.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 tidy-1.0-37.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 libtidy-1.0-37.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libtidy-devel-1.0-37.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 tidy-1.0-37.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libtidy-0_99-0-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 libtidy-0_99-0-devel-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 tidy-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 libtidy-0_99-0-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libtidy-0_99-0-devel-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 tidy-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libtidy-0_99-0-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libtidy-0_99-0-devel-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 tidy-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libtidy-0_99-0-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libtidy-0_99-0-devel-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 tidy-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libtidy-0_99-0-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libtidy-0_99-0-devel-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 tidy-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libtidy-0_99-0-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libtidy-0_99-0-devel-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 tidy-1.0.20100204cvs-25.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libtidy-devel-5.2.0-2.3 as a component of openSUSE Tumbleweed libtidy5-5.2.0-2.3 as a component of openSUSE Tumbleweed tidy-5.2.0-2.3 as a component of openSUSE Tumbleweed tidy-doc-5.2.0-2.3 as a component of openSUSE Tumbleweed The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation. CVE-2015-5523 SUSE Linux Enterprise Desktop 11 SP3:libtidy-1.0-37.1 SUSE Linux Enterprise Desktop 11 SP4:libtidy-1.0-37.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libtidy5-5.4.0-3.2.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libtidy5-5.4.0-3.2.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libtidy5-5.4.0-3.2.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libtidy5-5.4.0-3.2.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libtidy5-5.4.0-3.2.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libtidy5-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15:libtidy-devel-5.4.0-1.34 SUSE Linux Enterprise Module for Development Tools 15:libtidy5-5.4.0-1.34 SUSE Linux Enterprise Module for Development Tools 15:tidy-5.4.0-1.34 SUSE Linux Enterprise Module for Development Tools 15 SP1:libtidy-devel-5.4.0-1.34 SUSE Linux Enterprise Module for Development Tools 15 SP1:libtidy5-5.4.0-1.34 SUSE Linux Enterprise Module for Development Tools 15 SP1:tidy-5.4.0-1.34 SUSE Linux Enterprise Module for Development Tools 15 SP2:libtidy-devel-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP2:tidy-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:libtidy-devel-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:tidy-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:libtidy-devel-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:tidy-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:libtidy-devel-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:tidy-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:libtidy-devel-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:tidy-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:libtidy-devel-5.4.0-3.2.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:tidy-5.4.0-3.2.1 SUSE Linux Enterprise Server 16.0:libtidy-devel-5.8.0-160000.2.2 SUSE Linux Enterprise Server 16.0:libtidy58-5.8.0-160000.2.2 SUSE Linux Enterprise Server 16.0:tidy-5.8.0-160000.2.2 SUSE Linux Enterprise Server 16.0:tidy-doc-5.8.0-160000.2.2 SUSE Linux Enterprise Software Development Kit 11 SP3:libtidy-1.0-37.1 SUSE Linux Enterprise Software Development Kit 11 SP3:libtidy-devel-1.0-37.1 SUSE Linux Enterprise Software Development Kit 11 SP3:tidy-1.0-37.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtidy-1.0-37.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libtidy-devel-1.0-37.1 SUSE Linux Enterprise Software Development Kit 11 SP4:tidy-1.0-37.1 SUSE Linux Enterprise Software Development Kit 12:libtidy-0_99-0-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12:libtidy-0_99-0-devel-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12:tidy-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP1:libtidy-0_99-0-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP1:libtidy-0_99-0-devel-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP1:tidy-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP2:libtidy-0_99-0-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP2:libtidy-0_99-0-devel-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP2:tidy-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP3:libtidy-0_99-0-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP3:libtidy-0_99-0-devel-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP3:tidy-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP4:libtidy-0_99-0-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP4:libtidy-0_99-0-devel-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP4:tidy-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP5:libtidy-0_99-0-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP5:libtidy-0_99-0-devel-1.0.20100204cvs-25.3 SUSE Linux Enterprise Software Development Kit 12 SP5:tidy-1.0.20100204cvs-25.3 openSUSE Tumbleweed:libtidy-devel-5.2.0-2.3 openSUSE Tumbleweed:libtidy5-5.2.0-2.3 openSUSE Tumbleweed:tidy-5.2.0-2.3 openSUSE Tumbleweed:tidy-doc-5.2.0-2.3 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P