CVE-2019-6975

Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.

Published : 2019-02-11 13:29 Updated : 2019-03-21 17:29

5.0
CVSS Score More info
Score 5.0 / 10
5.0
Vendor Product Version URI
Djangoproject Django 1.11.1 cpe:/a:djangoproject:django:1.11.1
Djangoproject Django 1.11.2 cpe:/a:djangoproject:django:1.11.2
Djangoproject Django 1.11.3 cpe:/a:djangoproject:django:1.11.3
Djangoproject Django 1.11.4 cpe:/a:djangoproject:django:1.11.4
Djangoproject Django 1.11.5 cpe:/a:djangoproject:django:1.11.5
Djangoproject Django 1.11.6 cpe:/a:djangoproject:django:1.11.6
Djangoproject Django 1.11.7 cpe:/a:djangoproject:django:1.11.7
Djangoproject Django 1.11.8 cpe:/a:djangoproject:django:1.11.8
Djangoproject Django 1.11.9 cpe:/a:djangoproject:django:1.11.9
Djangoproject Django 1.11.10 cpe:/a:djangoproject:django:1.11.10
Djangoproject Django 1.11.11 cpe:/a:djangoproject:django:1.11.11
Djangoproject Django 1.11.12 cpe:/a:djangoproject:django:1.11.12
Djangoproject Django 1.11.13 cpe:/a:djangoproject:django:1.11.13
Djangoproject Django 1.11.14 cpe:/a:djangoproject:django:1.11.14
Djangoproject Django 1.11.15 cpe:/a:djangoproject:django:1.11.15
Djangoproject Django 2.0.1 cpe:/a:djangoproject:django:2.0.1
Djangoproject Django 2.0.2 cpe:/a:djangoproject:django:2.0.2
Djangoproject Django 2.0.3 cpe:/a:djangoproject:django:2.0.3
Djangoproject Django 2.0.4 cpe:/a:djangoproject:django:2.0.4
Djangoproject Django 2.0.5 cpe:/a:djangoproject:django:2.0.5
Djangoproject Django 2.0.6 cpe:/a:djangoproject:django:2.0.6
Djangoproject Django 2.0.7 cpe:/a:djangoproject:django:2.0.7
Djangoproject Django 2.0.8 cpe:/a:djangoproject:django:2.0.8
Canonical Ubuntu Linux 16.04 cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~
Canonical Ubuntu Linux 18.04 cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~
Canonical Ubuntu Linux 18.10 cpe:/o:canonical:ubuntu_linux:18.10
  1. Canonical (1) Search CVE
    1. Ubuntu Linux (3) Search CVE
      1. 16.04
      2. 18.04
      3. 18.10
  2. Djangoproject (1) Search CVE
    1. Django (23) Search CVE
      1. 1.11.1
      2. 1.11.2
      3. 1.11.3
      4. 1.11.4
      5. 1.11.5
      6. 1.11.6
      7. 1.11.7
      8. 1.11.8
      9. 1.11.9
      10. 1.11.10
      11. 1.11.11
      12. 1.11.12
      13. 1.11.13
      14. 1.11.14
      15. 1.11.15
      16. 2.0.1
      17. 2.0.2
      18. 2.0.3
      19. 2.0.4
      20. 2.0.5
      21. 2.0.6
      22. 2.0.7
      23. 2.0.8

CWE

ID Name Description Links
CWE-400 Uncontrolled Resource Consumption ('Resource Exhaustion') The software does not properly restrict the size or amount of resources that are requested or influenced by an actor, which can be used to consume more resources than intended. CVE

History of changes

Date Event
2019-03-21 17:29
2019-02-21 16:18
2019-02-14 11:29
2019-02-12 11:29
2019-02-11 13:29

New CVE