Summary
It was discovered that Django incorrectly handled formatting certain
numbers. A remote attacker could possibly use this issue to cause Django to
consume resources, leading to a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | python-django | 1.8.7-1ubuntu5.8 |
| Ubuntu · 18.04 LTS 18.04:LTS | python-django | 1:1.11.11-1ubuntu1.3 |
Vulnerabilities 1
-
High 7.5
Uncontrolled Memory Consumption in Django
Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.
References
-
report
https://ubuntu.com/security/CVE-2019-6975