Denial Of Service (DoS)

🗓️ 06 Jan 2022 09:09:31Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 39 Views

Django DoS vulnerability due to large password overhead

Reporter	Title	Published	Views	Family All 87
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.11-alt1	24 Jan 202200:00	–	altlinux
ATTACKERKB	CVE-2021-45115	5 Jan 202200:15	–	attackerkb
AlpineLinux	CVE-2021-45115	4 Jan 202223:16	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Python-Django	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the UserAttributeSimilarityValidator component in the Django web development framework allows a attacker to perform a denial-of-service attack.	25 Jan 202200:00	–	bdu_fstec
CNNVD	Django 安全漏洞	4 Jan 202200:00	–	cnnvd
CNVD	Django Denial of Service Vulnerability (CNVD-2022-03215)	6 Jan 202200:00	–	cnvd
CVE	CVE-2021-45115	4 Jan 202223:16	–	cve
Cvelist	CVE-2021-45115	4 Jan 202223:16	–	cvelist
FreeBSD	Django -- multiple vulnerabilities	20 Dec 202100:00	–	freebsd

Vulners

Node

AND

google bionicMatch1:1.11.11-1ubuntu1.9debian

google bionicMatch1:1.11.11-1ubuntu1debian

google bionicMatch1:1.11.11-1ubuntu1.14debian

debian debian_linux

AND

py3-django py3-djangoMatch3.1.7-r1python

py3-django py3-djangoMatch3.1.13-r0python

py3-django py3-djangoMatch3.1.8-r0python

py3-django py3-djangoMatch3.1.7-r0python

py3-django py3-djangoMatch3.1.13-r1python

py3-django py3-djangoMatch1.11.28-r0python

py3-django py3-djangoMatch1.11.29-r0python

alpinelinux alpine_linuxMatchedge

AND

python-django python-djangoMatch1:1.11.29-1~deb10u1debian

debian debian_linuxMatch10

django_project djangoRange4.0a1–4.0python

django_project djangoRange3.0a1–3.2.10python

django_project djangoRange1.9a1–2.2.25python

python-django python-djangoMatch2.2.17_1.el8

python-django python-djangoMatch2.2.24_1.el8ui

python-django python-djangoMatch2.2.13_1.epel8.playground

python-django python-djangoMatch2.2.17_1.el8pc

python-django python-djangoMatch2.2.9_1.epel8.playground

python-django python-djangoMatch2.2.13_1.el8

python-django python-djangoMatch2.2.9_1.el8

python-django python-djangoMatch2.2.3_1.epel8.playground

python-django python-djangoMatch2.1.11_1.el8ost

python-django python-djangoMatch2.0.10_1.el8ost

python-django python-djangoMatch2.1.7_1.el8d

python-django python-djangoMatch3.2.7_4.el8pc

python-django python-djangoMatch2.2.24_1.el8

python-django python-djangoMatch2.2.19_1.el8

python-django python-djangoMatch3.2.9_3.el8ui

python-django python-djangoMatch2.2.3_1.el8

Source	Link
github	www.github.com/django/django/pull/15071
docs	www.docs.djangoproject.com/en/4.0/releases/security/
djangoproject	www.djangoproject.com/weblog/2022/jan/04/security-releases/
github	www.github.com/django/django/commit/2135637fdd5ce994de110affef9e67dffdf77277
github	www.github.com/django/django/commit/a8b32fe13bcaed1c0b772fdc53de84abc224fb20
github	www.github.com/django/django/commit/df79ef03ac867c93caaa6be56bc69e66abfeef8f
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
groups	www.groups.google.com/forum/
groups	www.groups.google.com/forum/

07 Nov 2023 22:25Current

3.8Low risk

Vulners AI Score3.8

CVSS 25

CVSS 3.17.5

EPSS0.02397