Lucene search
UbuntuUSN-2720-1HistoryAug 18, 2015 - 12:00 a.m.
Django vulnerability
2015-08-1800:00:00
ubuntu.com
29
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
Low
0.024 Low
EPSS
Percentile
89.9%
Releases
- Ubuntu 15.04
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- python-django - High-level Python web development framework
Details
Lin Hua Cheng discovered that Django incorrectly handled the session store.
A remote attacker could use this issue to cause the session store to fill
up, resulting in a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 15.04 | noarch | python-django | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python-django-common | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python-django-doc | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 15.04 | noarch | python3-django | < 1.7.6-1ubuntu2.2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-django | < 1.6.1-2ubuntu0.10 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-django-doc | < 1.6.1-2ubuntu0.10 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-django | < 1.3.1-4ubuntu1.18 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-django-doc | < 1.3.1-4ubuntu1.18 | UNKNOWN |
Related
openvas
openvas
Ubuntu: Security Advisory (USN-2720-1)
2015-08-20 00:00:00
Debian: Security Advisory (DLA-301-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3338-1 (python-django - security update)
2015-08-18 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2015-08-18 00:00:00
osv
osv
python-django - security update
2015-08-26 00:00:00
PYSEC-2015-22
2015-08-24 14:59:00
Django denial of service via empty session record creation
2022-05-17 00:36:02
debian
debian
[SECURITY] [DSA 3338-1] python-django security update
2015-08-18 18:27:49
[SECURITY] [DLA 301-1] python-django security update
2015-08-26 17:54:13
securityvulns
securityvulns
[USN-2720-1] Django vulnerability
2015-08-24 00:00:00
nessus
nessus
RHEL 7 : python-django (RHSA-2015:1894)
2024-04-21 00:00:00
Ubuntu 14.04 LTS : Django vulnerability (USN-2720-1)
2015-08-19 00:00:00
redhat
redhat
(RHSA-2015:1767) Moderate: python-django security update
2015-09-10 00:00:00
(RHSA-2015:1894) Moderate: python-django security update
2015-10-15 00:00:00
(RHSA-2015:1766) Moderate: python-django security update
2015-09-10 11:40:42
mageia
mageia
Updated python-django and python-django14 packages fix security vulnerabilities
2015-08-27 23:49:46
fedora
fedora
[SECURITY] Fedora 22 Update: python-django-1.8.7-1.fc22
2015-12-31 01:53:36
[SECURITY] Fedora 23 Update: python-django-1.8.6-1.fc23
2015-11-19 10:11:46
altlinux
altlinux
archlinux
archlinux
python-django, python2-django: denial of service
2015-08-25 00:00:00
veracode
veracode
Denial Of Service (DoS) Session Store Consumption Or Session Record Removal
2019-01-15 09:07:44
prion
prion
Session fixation
2015-08-24 14:59:00
Code injection
2015-08-24 14:59:00
cve
cve
CVE-2015-5963
2015-08-24 14:59:08
CVE-2015-5964
2015-08-24 14:59:09
cvelist
cvelist
CVE-2015-5963
2015-08-24 14:00:00
CVE-2015-5964
2015-08-24 14:00:00
ubuntucve
ubuntucve
CVE-2015-5963
2015-08-18 00:00:00
CVE-2015-5964
2015-08-18 00:00:00
nvd
nvd
CVE-2015-5963
2015-08-24 14:59:08
CVE-2015-5964
2015-08-24 14:59:09
github
github
Django denial of service via empty session record creation
2022-05-17 00:36:02
Denial-of-service possibility in logout() view by filling session store
2022-05-17 03:16:12
debiancve
debiancve
CVE-2015-5963
2015-08-24 14:59:08
CVE-2015-5964
2015-08-24 14:59:09
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
Low
0.024 Low
EPSS
Percentile
89.9%
Related for USN-2720-1