Lucene search
UbuntuUSN-2720-1HistoryAug 18, 2015 - 12:00 a.m.
Django vulnerability
2015-08-1800:00:00
ubuntu.com
27
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.024 Low
EPSS
Percentile
89.7%
Releases
- Ubuntu 15.04
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- python-django - High-level Python web development framework
Details
Lin Hua Cheng discovered that Django incorrectly handled the session store.
A remote attacker could use this issue to cause the session store to fill
up, resulting in a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 15.04 | noarch | python-django | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python-django-common | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python-django-doc | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python3-django | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-django | < 1.6.1-2ubuntu0.10 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-django-doc | < 1.6.1-2ubuntu0.10 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-django | < 1.3.1-4ubuntu1.18 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-django-doc | < 1.3.1-4ubuntu1.18 | UNKNOWN |
Related
redhat
redhat
(RHSA-2015:1894) Moderate: python-django security update
2015-10-15 00:00:00
(RHSA-2015:1766) Moderate: python-django security update
2015-09-10 11:40:42
(RHSA-2015:1767) Moderate: python-django security update
2015-09-10 00:00:00
osv
osv
python-django - security update
2015-08-26 00:00:00
PYSEC-2015-22
2015-08-24 14:59:00
Django denial of service via empty session record creation
2022-05-17 00:36:02
securityvulns
securityvulns
[USN-2720-1] Django vulnerability
2015-08-24 00:00:00
debian
debian
[SECURITY] [DSA 3338-1] python-django security update
2015-08-18 18:27:49
[SECURITY] [DLA 301-1] python-django security update
2015-08-26 17:54:13
freebsd
freebsd
django -- multiple vulnerabilities
2015-08-18 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-301-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-2720-1)
2015-08-20 00:00:00
Debian: Security Advisory (DSA-3338-1)
2015-08-17 00:00:00
nessus
nessus
FreeBSD : django -- multiple vulnerabilities (b0e54dc1-45d2-11e5-adde-14dae9d210b8)
2015-08-19 00:00:00
Ubuntu 14.04 LTS : Django vulnerability (USN-2720-1)
2015-08-19 00:00:00
Debian DLA-301-1 : python-django security update
2015-08-27 00:00:00
mageia
mageia
Updated python-django and python-django14 packages fix security vulnerabilities
2015-08-27 23:49:46
fedora
fedora
[SECURITY] Fedora 22 Update: python-django-1.8.7-1.fc22
2015-12-31 01:53:36
[SECURITY] Fedora 23 Update: python-django-1.8.6-1.fc23
2015-11-19 10:11:46
altlinux
altlinux
prion
prion
Session fixation
2015-08-24 14:59:00
Code injection
2015-08-24 14:59:00
veracode
veracode
Denial Of Service (DoS) Session Store Consumption Or Session Record Removal
2019-01-15 09:07:44
archlinux
archlinux
python-django, python2-django: denial of service
2015-08-25 00:00:00
github
github
Django denial of service via empty session record creation
2022-05-17 00:36:02
debiancve
debiancve
CVE-2015-5963
2015-08-24 14:59:00
CVE-2015-5964
2015-08-24 14:59:00
ubuntucve
ubuntucve
CVE-2015-5963
2015-08-18 00:00:00
CVE-2015-5964
2015-08-18 00:00:00
cve
cve
CVE-2015-5964
2015-08-24 14:59:00
CVE-2015-5963
2015-08-24 14:59:00
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.024 Low
EPSS
Percentile
89.7%
Related for USN-2720-1