vulnerability: Django up to 1.4.21/1.7.9 denial of service [CVE-2015-5964] : 8/19/2015 10:58:16 AM

Group Chat & IM for Teams

Communicate with co-workers in real time. Used by Netflix, Dropbox & Salesforce. $0/unlimited users. Get started >>

From our sponsors

Vulnerability Advisories

Vulnerabilities of scip VulDB

Django up to 1.4.21/1.7.9 denial of service [CVE-2015-5964]
8/17/2015 7:00:00 PM

General

scipID: 77330
Affected: Django up to 1.4.21/1.7.9
Published: 08/18/2015 (Lin Hua Cheng)
Risk: problematic

Created: 08/19/2015
Entry: 72.4% complete

Summary

A vulnerability, which was classified as problematic, has been found in Django up to 1.4.21/1.7.9. Affected by this issue is the function contrib.sessions.backends.base.SessionBase.flush()/cache_db.SessionStore.flush(). The manipulation with an unknown input leads to a denial of service vulnerability. Impacted is availability.

The weakness was published 08/18/2015 by Lin Hua Cheng as Security releases issued: 1.8.4, 1.7.10, 1.4.22 as confirmed news (Website). The advisory is shared for download at djangoproject.com. The public release has been coordinated with the vendor. This vulnerability is handled as CVE-2015-5964. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are known, but there is no available exploit.

Upgrading to version 1.4.22 or 1.7.10 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability. The vulnerability is also documented in the vulnerability database at SecurityTracker (ID 1033318). The entries 77329 are pretty similar.

CVSS

Base Score: 4.3 (CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P) [?]
Temp Score: 3.7 (CVSS2#E:ND/RL:OF/RC:C) [?]

CPE

Exploiting

Class: Denial of service
Local: No
Remote: Yes

Availability: No

Countermeasures

Recommended: Upgrade
Status: Official fix
Reaction Time: 0 days since reported
0-Day Time: 0 days since found
Exposure Time: 0 days since known

Upgrade: Django 1.4.22/1.7.10

Timeline

Sources

Advisory: Security releases issued: 1.8.4, 1.7.10, 1.4.22
Researcher: Lin Hua Cheng
Status: Confirmed
Coordinated: Yes

CVE: CVE-2015-5964 (mitre.org) (nvd.nist.org) (cvedetails.com)

SecurityTracker: 1033318 – Django logout() Function Session Management Flaw Lets Remote Users Consume Excessive Session Resources and Deny Service