Django has a potential denial-of-service vulnerability in IPv6 validation

🗓️ 14 Jan 2025 21:31:47Reported by GitHub Advisory DatabaseType

Django has a denial-of-service vulnerability in IPv6 validation affecting certain versions before updates.

Reporter	Title	Published	Views	Family All 105
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.17-py3-none-any.whl CVE-2024-56374	13 May 202507:38	–	ibm
AlpineLinux	CVE-2024-56374	14 Jan 202500:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Python-Django	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the `clean_ipv6_address` and `is_valid_ipv6_address` functions in the Django web application framework allows a attacker to cause a service failure.	6 Feb 202500:00	–	bdu_fstec
Chainguard	CVE-2024-56374 vulnerabilities	14 Jan 202519:15	–	cgr
Circl	CVE-2024-56374	14 Jan 202515:44	–	circl
CNNVD	Django 安全漏洞	14 Jan 202500:00	–	cnnvd
CVE	CVE-2024-56374	14 Jan 202500:00	–	cve
Cvelist	CVE-2024-56374	14 Jan 202500:00	–	cvelist
Debian	[BSA-121] Security Update for python-django	5 Feb 202510:36	–	debian

Vulners

Node

django_project djangoRange4.2–4.2.18pip

django_project djangoRange5.0–5.0.11pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-56374
docs	www.docs.djangoproject.com/en/dev/releases/security
groups	www.groups.google.com/g/django-announce
djangoproject	www.djangoproject.com/weblog/2025/jan/14/security-releases
openwall	www.openwall.com/lists/oss-security/2025/01/14/2
github	www.github.com/django/django/commit/ca2be7724e1244a4cb723de40a070f873c6e94bf
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-1.yaml
lists	www.lists.debian.org/debian-lts-announce/2025/01/msg00024.html
github	www.github.com/django/django/commit/4806731e58f3e8700a3c802e77899d54ac6021fe
github	www.github.com/django/django/commit/ad866a1ca3e7d60da888d25d27e46a8adb2ed36e

20 May 2025 18:06Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.8 - 7.5

EPSS0.01854

SSVC