Lucene search
Gentoo FoundationMGASA-2015-0327HistoryAug 27, 2015 - 11:49 p.m.
Updated python-django and python-django14 packages fix security vulnerabilities
2015-08-2723:49:46
Gentoo Foundation
advisories.mageia.org
9
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.024 Low
EPSS
Percentile
89.7%
Lin Hua Cheng discovered that Django incorrectly handled the session store. A remote attacker could use this issue to cause the session store to fill up, resulting in a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | python-django14 | <Â 1.4.22-1 | python-django14-1.4.22-1.mga4 |
| Mageia | 5 | noarch | python-django | <Â 1.8.4-1 | python-django-1.8.4-1.mga5 |
Related
osv
osv
python-django - security update
2015-08-26 00:00:00
PYSEC-2015-22
2015-08-24 14:59:00
Django denial of service via empty session record creation
2022-05-17 00:36:02
debian
debian
[SECURITY] [DSA 3338-1] python-django security update
2015-08-18 18:27:49
[SECURITY] [DLA 301-1] python-django security update
2015-08-26 17:54:13
securityvulns
securityvulns
[USN-2720-1] Django vulnerability
2015-08-24 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-301-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-2720-1)
2015-08-20 00:00:00
Debian: Security Advisory (DSA-3338-1)
2015-08-17 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2015-08-18 00:00:00
nessus
nessus
Debian DLA-301-1 : python-django security update
2015-08-27 00:00:00
Debian DSA-3338-1 : python-django - security update
2015-08-24 00:00:00
RHEL 7 : python-django (RHSA-2015:1894)
2024-04-21 00:00:00
redhat
redhat
(RHSA-2015:1767) Moderate: python-django security update
2015-09-10 00:00:00
(RHSA-2015:1894) Moderate: python-django security update
2015-10-15 00:00:00
(RHSA-2015:1766) Moderate: python-django security update
2015-09-10 11:40:42
ubuntu
ubuntu
Django vulnerability
2015-08-18 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: python-django-1.8.7-1.fc22
2015-12-31 01:53:36
[SECURITY] Fedora 23 Update: python-django-1.8.6-1.fc23
2015-11-19 10:11:46
altlinux
altlinux
archlinux
archlinux
python-django, python2-django: denial of service
2015-08-25 00:00:00
ubuntucve
ubuntucve
CVE-2015-5963
2015-08-18 00:00:00
CVE-2015-5964
2015-08-18 00:00:00
debiancve
debiancve
CVE-2015-5963
2015-08-24 14:59:00
CVE-2015-5964
2015-08-24 14:59:00
github
github
Django denial of service via empty session record creation
2022-05-17 00:36:02
prion
prion
Code injection
2015-08-24 14:59:00
Session fixation
2015-08-24 14:59:00
veracode
veracode
Denial Of Service (DoS) Session Store Consumption Or Session Record Removal
2019-01-15 09:07:44
cve
cve
CVE-2015-5963
2015-08-24 14:59:00
CVE-2015-5964
2015-08-24 14:59:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.024 Low
EPSS
Percentile
89.7%
Related for MGASA-2015-0327