The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2015-01-16T16:00:00

Updated: 2024-08-06T04:03:10.378Z

Reserved: 2014-11-18T00:00:00

Link: CVE-2015-0221

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-01-16T16:59:20.420

Modified: 2024-11-21T02:22:34.950

Link: CVE-2015-0221

cve-icon Redhat

Severity : Moderate

Publid Date: 2015-01-13T00:00:00Z

Links: CVE-2015-0221 - Bugzilla