Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-0222
HistoryJan 13, 2015 - 12:00 a.m.

CVE-2015-0222

2015-01-1300:00:00
ubuntu.com
ubuntu.com
10

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.027 Low

EPSS

Percentile

90.5%

ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before
1.7.3, when show_hidden_initial is set to True, allows remote attackers to
cause a denial of service by submitting duplicate values, which triggers a
large number of SQL queries.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchpython-django< 1.6.1-2ubuntu0.6UNKNOWN
ubuntu14.10noarchpython-django< 1.6.6-1ubuntu2.1UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.027 Low

EPSS

Percentile

90.5%