CVE-2019-6975 — Allocation of Resources Without Limits or Throttling in Django
Severity
7.5HIGHNVD
EPSS
18.4%
top 4.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 11
Latest updateFeb 18
Description
Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages2 packages
Also affects: Fedora 28, 29, Ubuntu Linux 16.04, 18.04, 18.10
Patches
🔴Vulnerability Details
4📋Vendor Advisories
3💬Community
4Bugzilla▶
CVE-2019-6975 python-django: memory exhaustion in django.utils.numberformat.format() [fedora-all]↗2019-02-18
Bugzilla▶
CVE-2019-6975 django:1.6/python-django: memory exhaustion in django.utils.numberformat.format() [fedora-all]↗2019-02-18
Bugzilla▶
CVE-2019-6975 python-django: memory exhaustion in django.utils.numberformat.format() [epel-7]↗2019-02-18
Bugzilla
▶