CVE-2015-0221 in Django
Summary
The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.
Reservation
11/18/2014
Disclosure
01/16/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68971 | Django django.views.static.serve resource management | 399 | Unproven | Official fix | CVE-2015-0221 |