Lucene search
GoogleOSV:USN-6378-1HistorySep 18, 2023 - 1:32 p.m.
python-django vulnerability
2023-09-1813:32:31
Google
osv.dev
11
django
uri handling
denial of service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
40.8%
It was discovered that Django incorrectly handled certain URIs with a very
large number of Unicode characters. A remote attacker could possibly use
this issue to cause Django to consume resources or crash, leading to a
denial of service.
Related
cve
cve
CVE-2023-41164
2023-11-03 05:15:29
osv
osv
Django Denial of service vulnerability in django.utils.encoding.uri_to_iri
2023-11-03 06:36:29
python-django - security update
2023-09-07 00:00:00
PYSEC-2023-225
2023-11-03 05:15:00
openvas
openvas
Django < 3.2.21, 4.1.x < 4.1.11, 4.2.x < 4.2.5 DoS Vulnerability - Windows
2023-11-06 00:00:00
Django < 3.2.21, 4.1.x < 4.1.11, 4.2.x < 4.2.5 DoS Vulnerability - Linux
2023-11-06 00:00:00
Debian: Security Advisory (DLA-3558-1)
2023-09-08 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-09-05 05:18:03
debian
debian
[SECURITY] [DLA 3558-1] python-django security update
2023-09-08 01:00:21
cvelist
cvelist
CVE-2023-41164
2023-11-03 00:00:00
nessus
nessus
FreeBSD : Django -- multiple vulnerabilities (8fd4f40a-4b7d-11ee-aa2a-080027de9982)
2023-09-05 00:00:00
RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2023:5208)
2024-04-28 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Django vulnerability (USN-6378-1)
2023-09-18 00:00:00
prion
prion
Design/Logic Flaw
2023-11-03 05:15:00
debiancve
debiancve
CVE-2023-41164
2023-11-03 05:15:29
github
github
Django Denial of service vulnerability in django.utils.encoding.uri_to_iri
2023-11-03 06:36:29
nvd
nvd
CVE-2023-41164
2023-11-03 05:15:29
freebsd
freebsd
Django -- multiple vulnerabilities
2023-09-01 00:00:00
redhatcve
redhatcve
CVE-2023-41164
2023-09-05 15:35:56
ubuntucve
ubuntucve
CVE-2023-41164
2023-09-04 00:00:00
ubuntu
ubuntu
Django vulnerability
2023-09-18 00:00:00
Django vulnerabilities
2023-10-04 00:00:00
alpinelinux
alpinelinux
CVE-2023-41164
2023-11-03 05:15:29
redhat
redhat
fedora
fedora
[SECURITY] Fedora 39 Update: python-django-4.2.6-1.fc39
2023-11-03 18:57:22
[SECURITY] Fedora 38 Update: python-django-4.1.12-1.fc38
2023-10-15 01:44:30
[SECURITY] Fedora 37 Update: python-django-4.1.12-1.fc37
2023-10-23 01:25:13
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
40.8%
Related for OSV:USN-6378-1