Lucene search
RedhatCVE-2012-3444HistoryJul 31, 2012 - 5:55 p.m.
CVE-2012-3444
2012-07-3117:55:04
CWE-119
redhat
web.nvd.nist.gov
55
django
get_image_dimensions
image-handling
vulnerability
cve-2012-3444
denial of service
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.3
Confidence
Low
EPSS
0.02
Percentile
88.9%
The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image.
Affected configurations
Node
djangoprojectdjangoRangeβ€1.3
ORdjangoprojectdjangoMatch0.95
ORdjangoprojectdjangoMatch0.96
ORdjangoprojectdjangoMatch1.0
ORdjangoprojectdjangoMatch1.0alpha1
ORdjangoprojectdjangoMatch1.0alpha2
ORdjangoprojectdjangoMatch1.0beta
ORdjangoprojectdjangoMatch1.0beta2
ORdjangoprojectdjangoMatch1.0.1
ORdjangoprojectdjangoMatch1.0.2
ORdjangoprojectdjangoMatch1.1
ORdjangoprojectdjangoMatch1.1alpha1
ORdjangoprojectdjangoMatch1.1beta1
ORdjangoprojectdjangoMatch1.1rc1
ORdjangoprojectdjangoMatch1.1.2
ORdjangoprojectdjangoMatch1.1.3
ORdjangoprojectdjangoMatch1.1.4
ORdjangoprojectdjangoMatch1.2
ORdjangoprojectdjangoMatch1.2beta1
ORdjangoprojectdjangoMatch1.2rc1
ORdjangoprojectdjangoMatch1.2-alpha1
ORdjangoprojectdjangoMatch1.2.2
ORdjangoprojectdjangoMatch1.2.4
ORdjangoprojectdjangoMatch1.2.5
ORdjangoprojectdjangoMatch1.2.6
ORdjangoprojectdjangoMatch1.2.7
ORdjangoprojectdjangoMatch1.3alpha1
ORdjangoprojectdjangoMatch1.3beta1
ORdjangoprojectdjangoMatch1.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| djangoproject | django | 1.0.2 | cpe:/a:djangoproject:django:1.0.2::: |
| djangoproject | django | 1.1.4 | cpe:/a:djangoproject:django:1.1.4::: |
| djangoproject | django | 1.2 | cpe:/a:djangoproject:django:1.2:rc1:: |
| djangoproject | django | 1.2 | cpe:/a:djangoproject:django:1.2:beta1:: |
| djangoproject | django | 1.2.5 | cpe:/a:djangoproject:django:1.2.5::: |
| djangoproject | django | 1.0.1 | cpe:/a:djangoproject:django:1.0.1::: |
| djangoproject | django | 1.0 | cpe:/a:djangoproject:django:1.0::: |
| djangoproject | django | 1.1.3 | cpe:/a:djangoproject:django:1.1.3::: |
| djangoproject | django | 1.1 | cpe:/a:djangoproject:django:1.1:beta1:: |
| djangoproject | django | 1.3 | cpe:/a:djangoproject:django:1.3:alpha1:: |
Related
osv
osv
Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer
2022-05-17 05:12:01
PYSEC-2012-4
2012-07-31 17:55:00
python-django - several
2012-08-14 00:00:00
debiancve
debiancve
CVE-2012-3444
2012-07-31 17:55:04
github
github
prion
prion
Design/Logic Flaw
2012-07-31 17:55:00
ubuntucve
ubuntucve
CVE-2012-3444
2012-07-31 00:00:00
cvelist
cvelist
CVE-2012-3444
2012-07-31 17:00:00
gitlab
gitlab
Improper Restriction of Operations within the Bounds of a Memory Buffer
2022-05-17 00:00:00
nvd
nvd
CVE-2012-3444
2012-07-31 17:55:04
openvas
openvas
Fedora Update for Django FEDORA-2012-11416
2012-08-14 00:00:00
Fedora Update for Django FEDORA-2012-11415
2012-08-30 00:00:00
Fedora Update for Django FEDORA-2012-20224
2012-12-26 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: Django-1.4.3-1.fc17
2012-12-20 03:20:48
[SECURITY] Fedora 16 Update: Django-1.3.2-1.fc16
2012-08-10 22:34:03
[SECURITY] Fedora 17 Update: Django-1.4.1-1.fc17
2012-08-10 22:27:19
debian
debian
[SECURITY] [DSA 2529-1] python-django security update
2012-08-14 20:05:21
securityvulns
securityvulns
[ MDVSA-2012:143 ] python-django
2012-09-03 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : python-django vulnerabilities (USN-1560-1)
2012-09-11 00:00:00
Debian DSA-2529-1 : python-django - several vulnerabilities
2012-08-15 00:00:00
openSUSE Security Update : python-django (openSUSE-SU-2012:0970-1)
2014-06-13 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2012-07-30 00:00:00
seebug
seebug
Djangoθ·¨η«θζ¬ζ§θ‘εδΈ€δΈͺζη»ζε‘ζΌζ΄
2012-08-03 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2012-09-10 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.3
Confidence
Low
EPSS
0.02
Percentile
88.9%
Related for CVE-2012-3444