CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitra ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD, Azure Linux, CBL-Mariner. Rated lower by Ubuntu (medium).
Description
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | tidy | 0:5.8.0-6.azl3 |
| CBL-Mariner 2.0 | tidy | 0:5.8.0-6.cm2 |
| debian 10 | tidy-html5 | no fix listed |
| debian 11 | tidy-html5 | no fix listed |
| debian 12 | tidy-html5 | no fix listed |
| debian 13 | tidy-html5 | 2:5.8.0-2 |
| debian 14 | tidy-html5 | 2:5.8.0-2 |
| echo | tidy-html5 | 2:5.8.0-2 |
| rapidfort amazon linux 2023 | tidy | no fix listed |
| rapidfort debian 12 | tidy-html5 | 2:5.8.0-2 |
| rapidfort debian 13 | tidy-html5 | 2:5.8.0-2 |
| ubuntu 18.04-ESM | tidy-html5 | no fix listed |
Show all 23 entries from 23 sources
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | tidy | 0:5.8.0-6.azl3 |
| CBL-Mariner 2.0 | tidy | 0:5.8.0-6.cm2 |
| debian 10 | tidy-html5 | no fix listed |
| debian 11 | tidy-html5 | no fix listed |
| debian 12 | tidy-html5 | no fix listed |
| debian 13 | tidy-html5 | 2:5.8.0-2 |
| debian 14 | tidy-html5 | 2:5.8.0-2 |
| echo | tidy-html5 | 2:5.8.0-2 |
| rapidfort amazon linux 2023 | tidy | no fix listed |
| rapidfort debian 12 | tidy-html5 | 2:5.8.0-2 |
| rapidfort debian 13 | tidy-html5 | 2:5.8.0-2 |
| ubuntu 18.04-ESM | tidy-html5 | no fix listed |
| ubuntu 20.04 | tidy-html5 | 2:5.6.0-11ubuntu0.20.04.1 |
| ubuntu 20.04-ESM | tidy-html5 | 2:5.6.0-11ubuntu0.20.04.1 |
| ubuntu 22.04 | tidy-html5 | 2:5.6.0-11ubuntu0.22.04.1 |
| ubuntu 23.04 | tidy-html5 | 2:5.6.0-11ubuntu0.23.04.1 |
| ubuntu 23.10 | tidy-html5 | 2:5.6.0-11ubuntu0.23.10.1 |
| ubuntu 24.04 | tidy-html5 | 2:5.6.0-11ubuntu1 |
| ubuntu 24.10 | tidy-html5 | 2:5.6.0-11ubuntu1 |
| ubuntu 25.04 | tidy-html5 | 2:5.6.0-11ubuntu1 |
| ubuntu 25.10 | tidy-html5 | 2:5.6.0-11ubuntu1 |
| ubuntu 26.04 | tidy-html5 | 2:5.6.0-11ubuntu1 |
| ubuntu 26.10 | tidy-html5 | 2:5.6.0-11ubuntu1 |