NetSight
IP …
medium5.0

CVE-2015-0221

The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remo…

Impact

The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.

Affected products

VendorProductAffected versions
DjangoprojectDjango
through 1.4.17
Versions 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10

Weakness classification

CWE-399

References