Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:PYSEC-2011-2
HistoryOct 19, 2011 - 10:55 a.m.

PYSEC-2011-2

2011-10-1910:55:00
Google
osv.dev
8

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

JSON

The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service (resource consumption) via a URL associated with (1) a slow response, (2) a completed TCP connection with no application data sent, or (3) a large amount of application data, a related issue to CVE-2011-1521.

CPENameOperatorVersion
djangoeq1.0.1
djangoeq1.1.2
djangoeq1.2
djangoeq1.1.4
djangoeq1.3
djangoeq1.2.1
djangoeq1.1.3
djangoeq1.2.4
djangoeq1.0.3
djangoeq1.1
Rows per page:
1-10 of 171

Related

gitlab 1
osv 3
debiancve 2
cve 2
github 1
prion 2
ubuntucve 2
nessus 33
openvas 42
veracode 1
securityvulns 5
ubuntu 6
redhat 3
oraclelinux 3
centos 2
debian 2
f5 1
ibm 1
vmware 2
gitlab
gitlab
Moderate severity vulnerability that affects django
2018-07-23 00:00:00
osv
osv
Moderate severity vulnerability that affects django
2018-07-23 19:51:35
python-django - several issues
2011-10-29 00:00:00
python2.6 - security update
2014-07-31 00:00:00
debiancve
debiancve
CVE-2011-4137
2011-10-19 10:55:00
CVE-2011-1521
2011-05-24 23:55:00
cve
cve
CVE-2011-4137
2011-10-19 10:55:00
CVE-2011-1521
2011-05-24 23:55:00
github
github
Moderate severity vulnerability that affects django
2018-07-23 19:51:35
prion
prion
Design/Logic Flaw
2011-10-19 10:55:00
Code injection
2011-05-24 23:55:00
ubuntucve
ubuntucve
CVE-2011-4137
2011-10-19 00:00:00
CVE-2011-1521
2011-05-24 00:00:00
nessus
nessus
openSUSE Security Update : libpython2_6-1_0 (openSUSE-SU-2011:0484-1)
2011-05-13 00:00:00
SuSE 10 Security Update : python (ZYPP Patch Number 7506)
2011-12-13 00:00:00
openSUSE Security Update : libpython2_6-1_0 (openSUSE-SU-2011:0484-1)
2014-06-13 00:00:00
openvas
openvas
Python Multiple Vulnerabilities (Windows)
2011-06-07 00:00:00
Python Multiple Vulnerabilities - Windows
2011-06-07 00:00:00
Python Multiple Vulnerabilities (May 2011) - Linux
2021-11-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:55:29
securityvulns
securityvulns
[ MDVSA-2011:096 ] python
2011-05-25 00:00:00
python security vulnerabilities
2011-05-25 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-11-06 00:00:00
ubuntu
ubuntu
Python 3 vulnerabilities
2011-12-19 00:00:00
Django vulnerabilities
2011-12-09 00:00:00
Python 2.7 vulnerabilities
2012-10-02 00:00:00
redhat
redhat
(RHSA-2011:0554) Moderate: python security, bug fix, and enhancement update
2011-05-19 00:00:00
(RHSA-2011:0492) Moderate: python security update
2011-05-05 00:00:00
(RHSA-2011:0491) Moderate: python security update
2011-05-05 00:00:00
oraclelinux
oraclelinux
python security update
2011-05-05 00:00:00
python security update
2011-05-05 00:00:00
python security, bug fix, and enhancement update
2011-05-28 00:00:00
centos
centos
python, tkinter security update
2011-05-05 20:50:48
python, tkinter security update
2011-05-05 21:37:02
debian
debian
[SECURITY] [DSA 2332-1] python-django security update
2011-10-29 05:50:53
[DLA 25-1] python2.6 security update
2014-07-31 21:07:32
f5
f5
K75910138 : Python vulnerabilities CVE-2011-1521, CVE-2011-4940, CVE-2011-4944, CVE-2012-0845, and CVE-2012-1150
2018-09-11 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in python 2.6.4 used in OS Image for AIX shipped with IBM Cloud Pak System
2020-05-06 11:57:04
vmware
vmware
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

JSON
Related for OSV:PYSEC-2011-2
gitlab1osv3debiancve2cve2github1prion2ubuntucve2nessus33openvas42veracode1securityvulns5ubuntu6redhat3oraclelinux3centos2debian2f51ibm1vmware2