Lucene search
UbuntuUSN-6414-2HistoryOct 04, 2023 - 12:00 a.m.
Django vulnerabilities
2023-10-0400:00:00
ubuntu.com
23
ubuntu 18.04 esm
python web development framework
cve-2023-43665
cve-2023-41164
denial of service
django
uri handling
Releases
- Ubuntu 18.04 ESM
Packages
- python-django - High-level Python web development framework
Details
USN-6414-1 and USN-6378-1 fixed CVE-2023-43665 and CVE-2023-41164 in Django,
respectively. This update provides the corresponding update for Ubuntu 18.04 LTS.
Original advisory details:
Wenchao Li discovered that the Django Truncator function incorrectly
handled very long HTML input. A remote attacker could possibly use this
issue to cause Django to consume resources, leading to a denial of service.
It was discovered that Django incorrectly handled certain URIs with a very
large number of Unicode characters. A remote attacker could possibly use
this issue to cause Django to consume resources or crash, leading to a
denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.04 | noarch | python3-django | < 1:1.11.11-1ubuntu1.21+esm2 | UNKNOWN |
| Ubuntu | 18.04 | noarch | python-django | < 1:1.11.11-1ubuntu1.21 | UNKNOWN |
| Ubuntu | 18.04 | noarch | python-django-common | < 1:1.11.11-1ubuntu1.21 | UNKNOWN |
| Ubuntu | 18.04 | noarch | python-django-doc | < 1:1.11.11-1ubuntu1.21 | UNKNOWN |
| Ubuntu | 18.04 | noarch | python3-django | < 1:1.11.11-1ubuntu1.21 | UNKNOWN |
Related
fedora
fedora
[SECURITY] Fedora 39 Update: python-django-4.2.6-1.fc39
2023-11-03 18:57:22
[SECURITY] Fedora 38 Update: python-asgiref-3.5.2-1.fc38
2023-10-15 01:44:29
[SECURITY] Fedora 38 Update: python-django-4.1.12-1.fc38
2023-10-15 01:44:30
openvas
openvas
Ubuntu: Security Advisory (USN-6414-2)
2023-10-05 00:00:00
Fedora: Security Advisory for python-django (FEDORA-2023-a67af7d8f4)
2023-11-05 00:00:00
Fedora: Security Advisory for python-django (FEDORA-2023-9d36d373f1)
2023-10-24 00:00:00
osv
osv
python-django vulnerabilities
2023-10-04 22:01:08
python-django - security update
2023-09-07 00:00:00
Django Denial of service vulnerability in django.utils.encoding.uri_to_iri
2023-11-03 06:36:29
nessus
nessus
Ubuntu 18.04 ESM : Django vulnerabilities (USN-6414-2)
2023-10-05 00:00:00
Fedora 39 : python-django (2023-a67af7d8f4)
2023-11-07 00:00:00
redhat
redhat
redhatcve
redhatcve
CVE-2023-43665
2023-10-04 19:54:23
CVE-2023-41164
2023-09-05 15:35:56
debian
debian
[SECURITY] [DLA 3558-1] python-django security update
2023-09-08 01:00:48
veracode
veracode
Denial Of Service (DoS)
2023-09-05 05:18:03
Regular Expression Denial Of Service (ReDoS)
2023-10-30 06:23:22
cvelist
cvelist
freebsd
freebsd
Django -- multiple vulnerabilities
2023-10-01 00:00:00
Django -- multiple vulnerabilities
2023-09-01 00:00:00
cve
cve
redos
redos
ROS-20231030-02
2023-10-30 00:00:00
debiancve
debiancve
prion
prion
Design/Logic Flaw
2023-11-03 05:15:00
Hardcoded credentials
2023-11-03 05:15:00
github
github
Django Denial of service vulnerability in django.utils.encoding.uri_to_iri
2023-11-03 06:36:29
Django Denial-of-service in django.utils.text.Truncator
2023-11-03 06:36:30
Regular expression denial-of-service in Django
2024-03-15 21:30:43
ubuntu
ubuntu
Django vulnerability
2023-09-18 00:00:00
Django vulnerability
2023-10-04 00:00:00
ubuntucve
ubuntucve
alpinelinux
alpinelinux
hackerone
hackerone