CVE-2015-5523

The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.

• CWE-119

• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlMailing List, Third Party Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlMailing List, Third Party Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2015/dsa-3309Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/06/04/2Exploit
• http://www.openwall.com/lists/oss-security/2015/07/13/7Exploit
• http://www.openwall.com/lists/oss-security/2015/07/15/3
• http://www.securityfocus.com/bid/75037
• http://www.securitytracker.com/id/1033703
• http://www.ubuntu.com/usn/USN-2695-1Third Party Advisory
• https://github.com/htacg/tidy-html5/issues/217#issuecomment-108565501Exploit
• https://support.apple.com/HT205212Third Party Advisory
• https://support.apple.com/HT205213Third Party Advisory
• https://support.apple.com/HT205267Third Party Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlMailing List, Third Party Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlMailing List, Third Party Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2015/dsa-3309Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/06/04/2Exploit
• http://www.openwall.com/lists/oss-security/2015/07/13/7Exploit
• http://www.openwall.com/lists/oss-security/2015/07/15/3
• http://www.securityfocus.com/bid/75037
• http://www.securitytracker.com/id/1033703
• http://www.ubuntu.com/usn/USN-2695-1Third Party Advisory
• https://github.com/htacg/tidy-html5/issues/217#issuecomment-108565501Exploit
• https://support.apple.com/HT205212Third Party Advisory
• https://support.apple.com/HT205213Third Party Advisory
• https://support.apple.com/HT205267Third Party Advisory

Published

Aug 11, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5515The Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x b…
• CVE-2015-5516Memory leak in the last hop kernel module in F5 BIG-IP LTM, …
• CVE-2015-5519Cross-site scripting (XSS) vulnerability in the applyConvolu…
• CVE-2015-5520Cross-site scripting (XSS) vulnerability in the Users module…
• CVE-2015-5521Cross-site scripting (XSS) vulnerability in BlackCat CMS 1.1…4.8
• CVE-2015-5522Heap-based buffer overflow in the ParseValue function in lex…
• CVE-2015-5524An issue was discovered on Samsung mobile devices with KK(4.…9.8
• CVE-2015-5528Cross-site scripting (XSS) vulnerability in the save_order f…
• CVE-2015-5529Multiple cross-site scripting (XSS) vulnerabilities in Free …
• CVE-2015-5530Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-5531Directory traversal vulnerability in Elasticsearch before 1.…
• CVE-2015-5532Multiple cross-site scripting (XSS) vulnerabilities in the P…6.1