Description

The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.

Remediation

References

CVE-2015-0221

Related Vulnerabilities

Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2021-32565)

WordPress Plugin WatuPRO SQL Injection (5.5.3.6)

WordPress Plugin Visual Composer:Page Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (4.7.3)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5106)

WordPress Plugin Processing Embed 'pluginurl' Parameter Cross-Site Scripting (0.5)

Severity

Medium

Classification

CVE-2015-0221

Tags

Missing Update Known Vulnerabilities