Linux Distros Unpatched Vulnerability : CVE-2023-41164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via...

Fedora: Security Advisory for python-django3 (FEDORA-2024-84fbbbb914)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2023:5758)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5758 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

Fedora 38 : python-django3 (2024-84fbbbb914)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-84fbbbb914 advisory. Security fixes for - CVE-2024-27351 Potential regular expression DOS in django.utils.text.Truncator.words - CVE-2024-24680 denial-of-service in...

RHEL 8 : RHUI 4.8 Release - Security Updates, Bug Fixes, and Enhancements (Moderate) (RHSA-2024:1878)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1878 advisory. Red Hat Update Infrastructure RHUI offers a highly scalable, highly redundant framework that enables you to manage repositories and content...

Fedora 39 : python-django (2023-a67af7d8f4)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a67af7d8f4 advisory. Security fix for CVE-2023-41164 and CVE-2023-43665 Tenable has extracted the preceding description block directly from the Fedora security advisory...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-41164 via django (>=4.1.0, <=4.1.10)

django PYPI version =4.1.0, =0.1.0, =0.0.3, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-41164 Source advisory: OSV:GHSA-7H4P-27MH-HMRW...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +164 more potentially affected by CVE-2023-41164 via django (>=3.2.0, <=3.2.20)

django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-41164 Source advisory: OSV:GHSA-7H4P-27MH-HMRW...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +164 more potentially affected by CVE-2023-41164 via django (>=3.2.0, <=3.2.20)

django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-41164 Source advisory: GHSA-7H4P-27MH-HMRW...

admin-auth0 (>=0.1.1, <=0.1.5), arches (>=7.5.0a0, <=7.5.0a1) +67 more potentially affected by CVE-2023-41164 via django (>=4.2.0, <=4.2.4)

django PYPI version =4.2.0, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =9.3.0, =9.3.1 - dj-rest-kit 0.0.1a0 and more Source cves: CVE-2023-41164 Source advisory: OSV:GHSA-7H4P-27MH-HMRW...

admin-auth0 (>=0.1.1, <=0.1.5), arches (>=7.5.0a0, <=7.5.0a1) +67 more potentially affected by CVE-2023-41164 via django (>=4.2.0, <=4.2.4)

django PYPI version =4.2.0, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =9.3.0, =9.3.1 - dj-rest-kit 0.0.1a0 and more Source cves: CVE-2023-41164 Source advisory: GHSA-7H4P-27MH-HMRW...

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-41164 via django (>=4.1.0, <=4.1.10)

django PYPI version =4.1.0, =0.1.0, =0.0.3, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-41164 Source advisory: OSV:PYSEC-2023-225...

admin-auth0 (>=0.1.1, <=0.1.5), arches (>=7.5.0a0, <=7.5.0a1) +67 more potentially affected by CVE-2023-41164 via django (>=4.2.0, <=4.2.4)

django PYPI version =4.2.0, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =9.3.0, =9.3.1 - dj-rest-kit 0.0.1a0 and more Source cves: CVE-2023-41164 Source advisory: OSV:PYSEC-2023-225...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +164 more potentially affected by CVE-2023-41164 via django (>=3.2.0, <=3.2.20)

django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-41164 Source advisory: OSV:PYSEC-2023-225...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-41164 via django (>=4.1.0, <=4.1.10)

django PYPI version =4.1.0, =0.1.0, =0.0.3, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-41164 Source advisory: MEND:CVE-2023-41164...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +164 more potentially affected by CVE-2023-41164 via django (>=3.2.0, <=3.2.20)

django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-41164 Source advisory: MEND:CVE-2023-41164...

CVE-2023-41164

CVE-2023-41164 affects Django versions where uri_to_iri() is vulnerable to a DoS via inputs with a vast number of Unicode characters. Affected are Django 3.2 before 3.2.21, Django 4.1 before 4.1.11, and Django 4.2 before 4.2.5. The root cause is described as a potential denial-of-service in djang...

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...