Lucene search
GoogleOSV:PYSEC-2016-18HistoryDec 09, 2016 - 8:59 p.m.
PYSEC-2016-18
2016-12-0920:59:00
Google
osv.dev
14
EPSS
0.017
Percentile
87.7%
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.
References
www.debian.org/security/2017/dsa-3835
www.securityfocus.com/bid/94068
www.securitytracker.com/id/1037159
www.ubuntu.com/usn/USN-3115-1
lists.fedoraproject.org/archives/list/[email protected]/message/OG5ROMUPS6C7BXELD3TAUUH7OBYV56WQ/
lists.fedoraproject.org/archives/list/[email protected]/message/QXDKJYHN74BWY3P7AR2UZDVJREQMRE6S/
www.djangoproject.com/weblog/2016/nov/01/security-releases/
Related
ubuntucve
ubuntucve
CVE-2016-9014
2016-11-01 00:00:00
github
github
Django DNS Rebinding Vulnerability
2022-05-17 00:27:18
openvas
openvas
Debian: Security Advisory (DLA-706-1)
2023-03-08 00:00:00
Fedora Update for python-django FEDORA-2016-3eb5a55123
2016-12-02 00:00:00
Ubuntu: Security Advisory (USN-3115-1)
2016-11-08 00:00:00
cve
cve
CVE-2016-9014
2016-12-09 20:59:06
prion
prion
Hardcoded credentials
2016-12-09 20:59:00
osv
osv
CVE-2016-9014
2016-12-09 20:59:00
Django DNS Rebinding Vulnerability
2022-05-17 00:27:18
python-django - security update
2017-04-26 00:00:00
debiancve
debiancve
CVE-2016-9014
2016-12-09 20:59:06
redhatcve
redhatcve
CVE-2016-9014
2016-11-01 16:47:24
cvelist
cvelist
CVE-2016-9014
2016-12-09 20:00:00
alpinelinux
alpinelinux
CVE-2016-9014
2016-12-09 20:59:06
nvd
nvd
CVE-2016-9014
2016-12-09 20:59:06
mageia
mageia
Updated python-django packages fix security vulnerabilities
2016-11-06 13:34:34
altlinux
altlinux
archlinux
archlinux
[ASA-201611-15] python-django: multiple issues
2016-11-16 00:00:00
[ASA-201611-14] python2-django: multiple issues
2016-11-16 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: python-django-1.9.11-1.fc24
2016-11-14 21:03:18
[SECURITY] Fedora 25 Update: python-django-1.9.11-1.fc25
2016-11-19 21:49:10
nessus
nessus
RHEL 6 : python-django (Unpatched Vulnerability)
2024-05-11 00:00:00
FreeBSD : django -- multiple vulnerabilities (cb116651-79db-4c09-93a2-c38f9df46724)
2016-11-03 00:00:00
Fedora 25 : python-django (2016-d4571bf555)
2016-11-21 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2016-11-01 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2016-11-01 00:00:00
debian
debian
[SECURITY] [DSA 3835-1] python-django security update
2017-04-26 20:05:26
[SECURITY] [DSA 3835-1] python-django security update
2017-04-26 20:05:26