Lucene search
MitreCVELIST:CVE-2016-9014HistoryDec 09, 2016 - 8:00 p.m.
CVE-2016-9014
2016-12-0920:00:00
mitre
www.cve.org
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.
References
www.debian.org/security/2017/dsa-3835
www.securityfocus.com/bid/94068
www.securitytracker.com/id/1037159
www.ubuntu.com/usn/USN-3115-1
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OG5ROMUPS6C7BXELD3TAUUH7OBYV56WQ/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXDKJYHN74BWY3P7AR2UZDVJREQMRE6S/
www.djangoproject.com/weblog/2016/nov/01/security-releases/
Related
prion
prion
Hardcoded credentials
2016-12-09 20:59:00
osv
osv
CVE-2016-9014
2016-12-09 20:59:00
Django DNS Rebinding Vulnerability
2022-05-17 00:27:18
PYSEC-2016-18
2016-12-09 20:59:00
cve
cve
CVE-2016-9014
2016-12-09 20:59:06
openvas
openvas
Debian: Security Advisory (DLA-706-1)
2023-03-08 00:00:00
Fedora Update for python-django FEDORA-2016-3eb5a55123
2016-12-02 00:00:00
Fedora Update for python-django FEDORA-2016-d4571bf555
2016-12-07 00:00:00
github
github
Django DNS Rebinding Vulnerability
2022-05-17 00:27:18
ubuntucve
ubuntucve
CVE-2016-9014
2016-11-01 00:00:00
debiancve
debiancve
CVE-2016-9014
2016-12-09 20:59:06
redhatcve
redhatcve
CVE-2016-9014
2016-11-01 16:47:24
alpinelinux
alpinelinux
CVE-2016-9014
2016-12-09 20:59:06
nvd
nvd
CVE-2016-9014
2016-12-09 20:59:06
altlinux
altlinux
mageia
mageia
Updated python-django packages fix security vulnerabilities
2016-11-06 13:34:34
nessus
nessus
Fedora 25 : python-django (2016-d4571bf555)
2016-11-21 00:00:00
Fedora 24 : python-django (2016-3eb5a55123)
2016-11-15 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : Django vulnerabilities (USN-3115-1)
2016-11-02 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2016-11-01 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2016-11-01 00:00:00
archlinux
archlinux
[ASA-201611-15] python-django: multiple issues
2016-11-16 00:00:00
[ASA-201611-14] python2-django: multiple issues
2016-11-16 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: python-django-1.9.11-1.fc25
2016-11-19 21:49:10
[SECURITY] Fedora 24 Update: python-django-1.9.11-1.fc24
2016-11-14 21:03:18
debian
debian
[SECURITY] [DSA 3835-1] python-django security update
2017-04-26 20:05:43
[SECURITY] [DSA 3835-1] python-django security update
2017-04-26 20:05:26