Django up to 4.2.14/5.0.7 Template Filter django.utils.numberformat.floatformat memory allocation

Summaryinfo

A vulnerability described as problematic has been identified in Django up to 4.2.14/5.0.7. The impacted element is the function django.utils.numberformat.floatformat of the component Template Filter. The manipulation results in memory allocation. This vulnerability is reported as CVE-2024-41989. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability classified as problematic has been found in Django up to 4.2.14/5.0.7. Affected is the function django.utils.numberformat.floatformat of the component Template Filter. The manipulation with an unknown input leads to a memory allocation vulnerability. CWE is classifying the issue as CWE-789. The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated. This is going to have an impact on availability. CVE summarizes:

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.

The advisory is shared for download at seclists.org. This vulnerability is traded as CVE-2024-41989. The exploitability is told to be easy. It is possible to launch the attack remotely. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 209894 (RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Release Update (Moderate) (RHSA-2024:8534)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 4.2.15 or 5.0.8 eliminates this vulnerability. The upgrade is hosted for download at docs.djangoproject.com.

The vulnerability is also documented in the databases at Tenable (209894) and EUVD (EUVD-2024-0044). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Content Management System

Name

• Django

Version

• 4.2.0
• 4.2.1
• 4.2.2
• 4.2.3
• 4.2.4
• 4.2.5
• 4.2.6
• 4.2.7
• 4.2.8
• 4.2.9
• 4.2.10
• 4.2.11
• 4.2.12
• 4.2.13
• 4.2.14
• 5.0.0
• 5.0.1
• 5.0.2
• 5.0.3
• 5.0.4
• 5.0.5
• 5.0.6
• 5.0.7

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion