Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-5143HistoryJul 14, 2015 - 5:59 p.m.
CVE-2015-5143
2015-07-1417:59:06
Debian Security Bug Tracker
security-tracker.debian.org
11
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.135 Low
EPSS
Percentile
95.6%
The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | python-django | < 1.7.9-1 | python-django_1.7.9-1_all.deb |
| Debian | 11 | all | python-django | < 1.7.9-1 | python-django_1.7.9-1_all.deb |
| Debian | 999 | all | python-django | < 1.7.9-1 | python-django_1.7.9-1_all.deb |
| Debian | 13 | all | python-django | < 1.7.9-1 | python-django_1.7.9-1_all.deb |
Related
redhat
redhat
(RHSA-2015:1678) Moderate: python-django security update
2015-08-24 00:00:00
(RHSA-2015:1686) Moderate: python-django security update
2015-08-25 00:00:00
veracode
veracode
Denial Of Service (DoS) Session Store Consumption
2019-01-15 09:07:23
nvd
nvd
CVE-2015-5143
2015-07-14 17:59:06
ubuntucve
ubuntucve
CVE-2015-5143
2015-07-08 00:00:00
cve
cve
CVE-2015-5143
2015-07-14 17:59:06
osv
osv
Django Denial-of-service by filling session store
2019-07-05 21:10:39
PYSEC-2015-20
2015-07-14 17:59:00
python-django - security update
2015-07-08 00:00:00
prion
prion
Sql injection
2015-07-14 17:59:00
cvelist
cvelist
CVE-2015-5143
2015-07-14 17:00:00
github
github
Django Denial-of-service by filling session store
2019-07-05 21:10:39
gitlab
gitlab
DOS by filling session store
2015-07-14 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Django vulnerabilities (USN-2671-1)
2015-07-13 00:00:00
openSUSE Security Update : python-django (openSUSE-2015-674)
2015-10-23 00:00:00
Debian DSA-3305-1 : python-django - security update
2015-07-09 00:00:00
openvas
openvas
Debian Security Advisory DSA 3305-1 (python-django - security update)
2015-07-08 00:00:00
Debian: Security Advisory (DSA-3305-1)
2015-07-07 00:00:00
Ubuntu: Security Advisory (USN-2671-1)
2015-07-10 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2015-07-09 00:00:00
debian
debian
[SECURITY] [DSA 3305-1] python-django security update
2015-07-08 22:14:05
[SECURITY] [DLA 272-1] python-django security update
2015-07-16 13:46:48
securityvulns
securityvulns
[USN-2671-1] Django vulnerabilities
2015-07-14 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2015-06-10 00:00:00
gentoo
gentoo
Django: Multiple vulnerabilities
2015-10-31 00:00:00
mageia
mageia
Updated python-django and python-django14 packages fix security vulnerabilities
2015-07-29 00:01:59
fedora
fedora
[SECURITY] Fedora 23 Update: python-django-1.8.6-1.fc23
2015-11-19 10:11:46
[SECURITY] Fedora 22 Update: python-django-1.8.3-1.fc22
2015-07-23 08:54:39
altlinux
altlinux
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.135 Low
EPSS
Percentile
95.6%
Related for DEBIANCVE:CVE-2015-5143