Lucene search
UbuntuUSN-2720-1HistoryAug 18, 2015 - 12:00 a.m.
Django vulnerability
2015-08-1800:00:00
ubuntu.com
28
Releases
- Ubuntu 15.04
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- python-django - High-level Python web development framework
Details
Lin Hua Cheng discovered that Django incorrectly handled the session store.
A remote attacker could use this issue to cause the session store to fill
up, resulting in a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 15.04 | noarch | python-django | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python-django-common | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python-django-doc | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python3-django | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-django | < 1.6.1-2ubuntu0.10 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-django-doc | < 1.6.1-2ubuntu0.10 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-django | < 1.3.1-4ubuntu1.18 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-django-doc | < 1.3.1-4ubuntu1.18 | UNKNOWN |
Related
nessus
nessus
Debian DLA-301-1 : python-django security update
2015-08-27 00:00:00
Debian DSA-3338-1 : python-django - security update
2015-08-24 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3338-1)
2015-08-17 00:00:00
Debian: Security Advisory (DLA-301-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-2720-1)
2015-08-20 00:00:00
mageia
mageia
Updated python-django and python-django14 packages fix security vulnerabilities
2015-08-27 23:49:46
redhat
redhat
(RHSA-2015:1767) Moderate: python-django security update
2015-09-10 00:00:00
(RHSA-2015:1894) Moderate: python-django security update
2015-10-15 00:00:00
(RHSA-2015:1766) Moderate: python-django security update
2015-09-10 11:40:42
debian
debian
[SECURITY] [DLA 301-1] python-django security update
2015-08-26 17:54:30
[SECURITY] [DSA 3338-1] python-django security update
2015-08-18 18:28:08
osv
osv
python-django - security update
2015-08-26 00:00:00
Django denial of service via empty session record creation
2022-05-17 00:36:02
PYSEC-2015-22
2015-08-24 14:59:00
securityvulns
securityvulns
[USN-2720-1] Django vulnerability
2015-08-24 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2015-08-18 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: python-django-1.8.7-1.fc22
2015-12-31 01:53:36
[SECURITY] Fedora 23 Update: python-django-1.8.6-1.fc23
2015-11-19 10:11:46
altlinux
altlinux
github
github
Django denial of service via empty session record creation
2022-05-17 00:36:02
Denial-of-service possibility in logout() view by filling session store
2022-05-17 03:16:12
debiancve
debiancve
CVE-2015-5963
2015-08-24 14:59:00
CVE-2015-5964
2015-08-24 14:59:00
ubuntucve
ubuntucve
CVE-2015-5963
2015-08-18 00:00:00
CVE-2015-5964
2015-08-18 00:00:00
cvelist
cvelist
CVE-2015-5963
2015-08-24 14:00:00
CVE-2015-5964
2015-08-24 14:00:00
prion
prion
Session fixation
2015-08-24 14:59:00
Code injection
2015-08-24 14:59:00
veracode
veracode
Denial Of Service (DoS) Session Store Consumption Or Session Record Removal
2019-01-15 09:07:44
archlinux
archlinux
python-django, python2-django: denial of service
2015-08-25 00:00:00
cve
cve
CVE-2015-5964
2015-08-24 14:59:00
CVE-2015-5963
2015-08-24 14:59:00