CVE-2021-33391: Use After Free
Published Feb 17, 2023
·Updated
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.
Affected Software
4 affected components
HTACG Tidy=5.7.28
Linux Linux kernel
All of the following
HTACG Tidy=5.7.28
Linux Linux kernel
Remediation
Patch Available
Event History
Feb 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-33391?
CVE-2021-33391 has been classified as a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2021-33391?
To fix CVE-2021-33391, upgrade HTACG HTML Tidy to version 5.7.29 or later.
3
What software is affected by CVE-2021-33391?
CVE-2021-33391 affects HTACG HTML Tidy version 5.7.28.
4
How can an attacker exploit CVE-2021-33391?
An attacker can exploit CVE-2021-33391 by using the -g option in the CleanNode() function in gdoc.c to execute arbitrary code.
5
Is the Linux Kernel vulnerable to CVE-2021-33391?
No, the Linux Kernel is not vulnerable to CVE-2021-33391.