Lucene search
GoogleOSV:PYSEC-2013-18HistorySep 23, 2013 - 8:55 p.m.
PYSEC-2013-18
2013-09-2320:55:00
Google
osv.dev
10
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed.
Related
threatpost
threatpost
Patches for Django Framework Fix DoS Vuln
2013-09-17 13:40:25
nessus
nessus
Debian DSA-2758-1 : python-django - denial of service
2013-09-18 00:00:00
openSUSE Security Update : python-django (openSUSE-SU-2013:1685-1)
2014-06-13 00:00:00
openSUSE Security Update : python-django (openSUSE-SU-2013:1492-1)
2014-06-13 00:00:00
freebsd
freebsd
django -- denial-of-service via large passwords
2013-09-15 00:00:00
prion
prion
Authentication flaw
2013-09-23 20:55:00
openvas
openvas
Debian Security Advisory DSA 2758-1 (python-django - denial of service)
2013-09-17 00:00:00
Debian: Security Advisory (DSA-2758-1)
2013-09-16 00:00:00
Ubuntu Update for python-django USN-1967-1
2013-10-03 00:00:00
gitlab
gitlab
DOS via large passwords
2013-09-23 00:00:00
osv
osv
python-django - denial of service
2013-09-17 00:00:00
Django Denial of Service Vulnerability in the authentication framework
2022-05-17 04:53:45
ubuntucve
ubuntucve
CVE-2013-1443
2013-09-20 00:00:00
debiancve
debiancve
CVE-2013-1443
2013-09-23 20:55:00
seebug
seebug
Django密码哈希拒绝服务漏洞(CVE-2013-1443)
2013-09-18 00:00:00
cve
cve
CVE-2013-1443
2013-09-23 20:55:00
github
github
Django Denial of Service Vulnerability in the authentication framework
2022-05-17 04:53:45
debian
debian
[SECURITY] [DSA 2758-1] python-django security update
2013-09-17 18:43:26
[SECURITY] [DSA 2758-1] python-django security update
2013-09-17 18:43:44
fedora
fedora
[SECURITY] Fedora 20 Update: python-django-1.5.4-1.fc20
2013-09-26 06:18:28
[SECURITY] Fedora 20 Update: python-django14-1.4.8-1.fc20
2013-09-24 23:00:28
[SECURITY] Fedora 19 Update: python-django-1.5.4-1.fc19
2013-09-24 22:56:43
cvelist
cvelist
CVE-2013-1443
2013-09-23 20:00:00
securityvulns
securityvulns
[USN-1967-1] Django vulnerabilities
2013-10-02 00:00:00
mageia
mageia
Updated python-django package fixes multiple vulnerabilities
2013-09-19 13:45:04
ubuntu
ubuntu
Django vulnerabilities
2013-09-24 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related for OSV:PYSEC-2013-18