CVE-2015-5964

The 1 contrib.sessions.backends.base.SessionBase.flush and 2 cachedb.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service session stor...

CVE-2015-5963

CVE-2015-5963 describes a DoS in Django where contrib.sessions.middleware.SessionMiddleware may create an empty session record when anonymously hitting contrib.auth.views.logout, leading to session store consumption. Affected versions are Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, and 1.4.x ...

CVE-2015-5964

The CVE-2015-5964 issue affects Django where the functions contrib.sessions.backends.base.SessionBase.flush and cache_db.SessionStore.flush can create empty sessions in certain circumstances, enabling a remote attacker to exhaust the session store and cause a denial of service. Affected versions ...

Django Denial of Service Vulnerability (CNVD-2015-05667)

Django is a set of Django Software Foundation based on the Python language open source Web application framework. A denial of service vulnerability exists in Django that allows remote attackers to cause a denial of service...

Debian DSA-3338-1 : python-django - security update

Lin Hua Cheng discovered that a session could be created when anonymously accessing the django.contrib.auth.views.logout view. This could allow remote attackers to saturate the session store or cause other users' session records to be evicted. Additionally the...

[USN-2720-1] Django vulnerability

========================================================================== Ubuntu Security Notice USN-2720-1 August 18, 2015 python-django vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

Django Remote Denial of Service Vulnerability

Django is a set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. Django has an unspecified security vulnerability vulnerability that allows a remote attacker can exploit the vulnerabili...

Ubuntu: Security Advisory (USN-2720-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : django -- multiple vulnerabilities (b0e54dc1-45d2-11e5-adde-14dae9d210b8)

Tim Graham reports : Denial-of-service possibility in logout view by filling session store Previously, a session could be created when anonymously accessing the django.contrib.auth.views.logout view provided it wasn't decorated with django.contrib.auth.decorators.loginrequired as done in the admi...

Ubuntu 14.04 LTS : Django vulnerability (USN-2720-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2720-1 advisory. Lin Hua Cheng discovered that Django incorrectly handled the session store. A remote attacker could use this issue to cause the session store to fill up,...

[SECURITY] [DSA 3338-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3338-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini August 18, 2015 https://www.debian.org/security/faq -...

USN-2720-1: Django vulnerability

Lin Hua Cheng discovered that Django incorrectly handled the session store. A remote attacker could use this issue to cause the session store to fill up, resulting in a denial of service...

USN-2720-1 python-django vulnerability

Lin Hua Cheng discovered that Django incorrectly handled the session store. A remote attacker could use this issue to cause the session store to fill up, resulting in a denial of service...

CVE-2015-5964

The 1 contrib.sessions.backends.base.SessionBase.flush and 2 cachedb.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service session stor...

CVE-2015-5963

contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service session store consumption or session record removal via a large number of requests to...

UBUNTU-CVE-2015-5963

contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service session store consumption or session record removal via a large number of requests to...

UBUNTU-CVE-2015-5964

The 1 contrib.sessions.backends.base.SessionBase.flush and 2 cachedb.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service session stor...

PT-2015-1974

Name of the Vulnerable Software and Affected Versions Django versions 1.4.x through 1.4.21 Django versions 1.7.x through 1.7.9 Django versions 1.8.x through 1.8.3 Description The issue is related to a resource management error in the contrib.sessions.middleware.SessionMiddleware component of the...

django -- multiple vulnerabilities

Tim Graham reports: Denial-of-service possibility in logout view by filling session store Previously, a session could be created when anonymously accessing the django.contrib.auth.views.logout view provided it wasn't decorated with django.contrib.auth.decorators.loginrequired as done in the admin...

Debian Security Advisory DSA 3338-1 (python-django - security update)

Lin Hua Cheng discovered that a session could be created when anonymously accessing the django.contrib.auth.views.logout view. This could allow remote attackers to saturate the session store or cause other users OpenVAS Vulnerability Test $Id: deb3338.nasl 6609 2017-07-07 12:05:59Z cfischer $...