Lucene search
GoogleOSV:PYSEC-2012-3HistoryJul 31, 2012 - 5:55 p.m.
PYSEC-2012-3
2012-07-3117:55:00
Google
osv.dev
14
EPSS
0.021
Percentile
89.1%
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service (memory consumption) by uploading an image file.
Related
cvelist
cvelist
CVE-2012-3443
2012-07-31 17:00:00
osv
osv
Django Image Field Vulnerable to Image Decompression Bombs
2022-05-17 05:12:01
python-django - several
2012-08-14 00:00:00
ubuntucve
ubuntucve
CVE-2012-3443
2012-07-31 00:00:00
cve
cve
CVE-2012-3443
2012-07-31 17:55:04
github
github
Django Image Field Vulnerable to Image Decompression Bombs
2022-05-17 05:12:01
debiancve
debiancve
CVE-2012-3443
2012-07-31 17:55:04
prion
prion
Design/Logic Flaw
2012-07-31 17:55:00
nvd
nvd
CVE-2012-3443
2012-07-31 17:55:04
gitlab
gitlab
Improper Input Validation
2022-05-17 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : python-django vulnerabilities (USN-1560-1)
2012-09-11 00:00:00
FreeBSD : django -- multiple vulnerabilities (f01292a0-db3c-11e1-a84b-00e0814cab4e)
2012-08-01 00:00:00
Fedora 16 : Django-1.3.2-1.fc16 (2012-11416)
2012-08-13 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: Django-1.4.1-1.fc17
2012-08-10 22:27:19
[SECURITY] Fedora 17 Update: Django-1.4.3-1.fc17
2012-12-20 03:20:48
[SECURITY] Fedora 16 Update: Django-1.3.2-1.fc16
2012-08-10 22:34:03
seebug
seebug
Djangoθ·¨η«θζ¬ζ§θ‘εδΈ€δΈͺζη»ζε‘ζΌζ΄
2012-08-03 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2012-09-10 00:00:00
openvas
openvas
Fedora Update for Django FEDORA-2012-20224
2012-12-26 00:00:00
FreeBSD Ports: py26-django, py27-django
2012-08-10 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2012-07-30 00:00:00
debian
debian
[SECURITY] [DSA 2529-1] python-django security update
2012-08-14 20:05:21
securityvulns
securityvulns
[ MDVSA-2012:143 ] python-django
2012-09-03 00:00:00