CVE-2015-0221: High severity djangoproject django vulnerability
The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.
Other sources
The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0221?
CVE-2015-0221 is classified as a denial of service vulnerability due to excessive memory consumption.
How do I fix CVE-2015-0221?
To fix CVE-2015-0221, upgrade to Django version 1.7.3, 1.6.10, or 1.4.18.
Which versions of Django are affected by CVE-2015-0221?
Django versions before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 are affected by CVE-2015-0221.
What type of attack does CVE-2015-0221 vulnerability enable?
CVE-2015-0221 allows remote attackers to perform a denial of service attack via long lines in files.
Is CVE-2015-0221 a local or remote vulnerability?
CVE-2015-0221 is a remote vulnerability, allowing attackers to exploit it from outside the affected system.