CVE-2015-2316: High severity oracle solaris and zettabyte file system (zfs) vulnerability
The utils.html.striptags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string.
Other sources
The utils.html.striptags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2316?
CVE-2015-2316 has a severity rating that indicates it can lead to denial of service due to an infinite loop caused by the utils.html.strip_tags function.
How do I fix CVE-2015-2316?
To fix CVE-2015-2316, upgrade Django to versions 1.6.11, 1.7.7, or 1.8c1 or later.
Which versions of Django are affected by CVE-2015-2316?
CVE-2015-2316 affects Django versions 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1.
What function in Django is vulnerable in CVE-2015-2316?
The utils.html.strip_tags function in Django is vulnerable in CVE-2015-2316.
Can CVE-2015-2316 be exploited remotely?
Yes, CVE-2015-2316 can be exploited remotely by attackers increasing the length of the input string.