Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 04:47
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securityfocus.com/bid/106964 - Third Party Advisory, VDB Entry | |
References | () https://docs.djangoproject.com/en/dev/releases/security/ - Patch, Vendor Advisory | |
References | () https://groups.google.com/forum/#%21topic/django-announce/WTwEAprR0IQ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66WMXHGBXD7GSM3PEXVCMCAGLMQYHZCU/ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVXDOVCXLD74SHR2BENGCE2OOYYYWJHZ/ - | |
References | () https://seclists.org/bugtraq/2019/Jul/10 - | |
References | () https://usn.ubuntu.com/3890-1/ - Third Party Advisory | |
References | () https://www.debian.org/security/2019/dsa-4476 - | |
References | () https://www.djangoproject.com/weblog/2019/feb/11/security-releases/ - Patch, Vendor Advisory | |
References | () https://www.openwall.com/lists/oss-security/2019/02/11/1 - Mailing List, Patch, Third Party Advisory |
07 Nov 2023, 03:13
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2019-02-11 13:29
Updated : 2024-11-21 04:47
NVD link : CVE-2019-6975
Mitre link : CVE-2019-6975
CVE.ORG link : CVE-2019-6975
JSON object : View
Products Affected
canonical
- ubuntu_linux
djangoproject
- django
fedoraproject
- fedora
CWE
CWE-770
Allocation of Resources Without Limits or Throttling