CVE-2017-17497: Buffer Overflow
Published Dec 10, 2017
·Updated
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value.
Affected Software
1 affected component
HTACG Tidy=5.7.0
Remediation
Patch Available
Event History
Dec 10, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-17497?
CVE-2017-17497 has a severity rating of 7.5, categorized as high.
2
How do I fix CVE-2017-17497?
To fix CVE-2017-17497, upgrade to a version of Tidy later than 5.7.0.
3
What impact does CVE-2017-17497 have on systems running Tidy 5.7.0?
CVE-2017-17497 can lead to a denial of service due to a segmentation fault.
4
Which version of Tidy is affected by CVE-2017-17497?
CVE-2017-17497 specifically affects Tidy version 5.7.0.
5
What coding issue is associated with CVE-2017-17497?
CVE-2017-17497 is associated with improper validation in the prvTidyTidyMetaCharset function.