USN-4084-1

Dashboard / Vulnerabilities / USN-4084-1

USN-4084-1

Summary: python-django vulnerabilities

Details: It was discovered that Django incorrectly handled the Truncator function. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service. (CVE-2019-14232) It was discovered that Django incorrectly handled the strip_tags function. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service. (CVE-2019-14233) It was discovered that Django incorrectly handled certain lookups in the PostgreSQL support. A remote attacker could possibly use this issue to perform SQL injection attacks. (CVE-2019-14234) It was discovered that Django incorrectly handled certain invalid UTF-8 octet sequences. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service. (CVE-2019-14235)

References: https://ubuntu.com/security/notices/USN-4084-1, https://ubuntu.com/security/CVE-2019-14232, https://ubuntu.com/security/CVE-2019-14233, https://ubuntu.com/security/CVE-2019-14234, https://ubuntu.com/security/CVE-2019-14235