CVE-2015-5964
Publication date 18 August 2015
Last updated 24 July 2024
Ubuntu priority
The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| python-django | ||
| 14.04 LTS trusty |
Fixed 1.6.1-2ubuntu0.10
|
|
References
Related Ubuntu Security Notices (USN)
- USN-2720-1
- Django vulnerability
- 18 August 2015