Vulnerabilities > CVE-2015-5963 - Resource Management Errors vulnerability in multiple products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (session store consumption or session record removal) via a large number of requests to contrib.auth.views.logout, which triggers the creation of an empty session record.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Nessus
NASL family SuSE Local Security Checks NASL id OPENSUSE-2015-598.NASL description python Django was updated to fix a remote denial of service (resource exhaustion) possibility in the auth views module. (bsc#941587, CVE-2015-5963) Also is_safe_url() was made to reject URLs that start with control characters to mitigate possible XSS attack via user-supplied redirect URLs (bnc#923176, CVE-2015-2317) - Method check_for_test_cookie is deprecated, bnc#914706 - Update to version 1.5.12 with various security fixes : + Fixed a regression with dynamically generated inlines and allowed field references in the admin + Allowed related many-to-many fields to be referenced in the admin + Allowed inline and hidden references to admin fields last seen 2020-06-05 modified 2015-09-23 plugin id 86091 published 2015-09-23 reporter This script is Copyright (C) 2015-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/86091 title openSUSE Security Update : python-django (openSUSE-2015-598) NASL family Fedora Local Security Checks NASL id FEDORA_2015-323274D412.NASL description Update to 1.8.7 , fixing CVE-2015-8213 (rhbz#1285278) ---- python- django-1.8.4-1.fc22 - Do not install bash completion for python executables (Ville Skytta, rhbz#1253076) - CVE-2015-5963 Denial-of-service possibility in logout() view by filling session store (rhbz#1254911) - CVE-2015-5964 Denial- of-service possibility in logout() view by filling session store (rhbz#1252891) python-django-1.8.4-1.fc23 - Do not install bash completion for python executables (Ville Skytta, rhbz#1253076) - CVE-2015-5963 Denial-of- service possibility in logout() view by filling session store (rhbz#1254911) - CVE-2015-5964 Denial-of-service possibility in logout() view by filling session store (rhbz#1252891) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-05 modified 2016-03-04 plugin id 89201 published 2016-03-04 reporter This script is Copyright (C) 2016-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/89201 title Fedora 22 : python-django-1.8.7-1.fc22 (2015-323274d412) NASL family Debian Local Security Checks NASL id DEBIAN_DSA-3338.NASL description Lin Hua Cheng discovered that a session could be created when anonymously accessing the django.contrib.auth.views.logout view. This could allow remote attackers to saturate the session store or cause other users last seen 2020-06-01 modified 2020-06-02 plugin id 85587 published 2015-08-24 reporter This script is Copyright (C) 2015-2018 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/85587 title Debian DSA-3338-1 : python-django - security update NASL family Debian Local Security Checks NASL id DEBIAN_DLA-301.NASL description denial of service possibility in logout() view by filling session store Previously, a session could be created when anonymously accessing the django.contrib.auth.views.logout view (provided it wasn last seen 2020-03-17 modified 2015-08-27 plugin id 85656 published 2015-08-27 reporter This script is Copyright (C) 2015-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/85656 title Debian DLA-301-1 : python-django security update NASL family Ubuntu Local Security Checks NASL id UBUNTU_USN-2720-1.NASL description Lin Hua Cheng discovered that Django incorrectly handled the session store. A remote attacker could use this issue to cause the session store to fill up, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 85534 published 2015-08-19 reporter Ubuntu Security Notice (C) 2015-2019 Canonical, Inc. / NASL script (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/85534 title Ubuntu 12.04 LTS / 14.04 LTS / 15.04 : python-django vulnerability (USN-2720-1) NASL family FreeBSD Local Security Checks NASL id FREEBSD_PKG_B0E54DC145D211E5ADDE14DAE9D210B8.NASL description Tim Graham reports : Denial-of-service possibility in logout() view by filling session store Previously, a session could be created when anonymously accessing the django.contrib.auth.views.logout view (provided it wasn last seen 2020-06-01 modified 2020-06-02 plugin id 85522 published 2015-08-19 reporter This script is Copyright (C) 2015-2018 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/85522 title FreeBSD : django -- multiple vulnerabilities (b0e54dc1-45d2-11e5-adde-14dae9d210b8) NASL family Fedora Local Security Checks NASL id FEDORA_2015-1DD5BC998F.NASL description rebase to 1.8.6 (rhbz#1276914) ---- rebase to 1.8.5 (rhbz#1276914) ---- python-django-1.8.4-1.fc23 - Do not install bash completion for python executables (Ville Skytta, rhbz#1253076) - CVE-2015-5963 Denial-of-service possibility in logout() view by filling session store (rhbz#1254911) - CVE-2015-5964 Denial-of-service possibility in logout() view by filling session store (rhbz#1252891) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-05 modified 2016-03-04 plugin id 89168 published 2016-03-04 reporter This script is Copyright (C) 2016-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/89168 title Fedora 23 : python-django-1.8.6-1.fc23 (2015-1dd5bc998f) NASL family SuSE Local Security Checks NASL id OPENSUSE-2015-592.NASL description python Django was updated to fix a remote denial of service (resource exhaustion) possibility in the auth views module. (bsc#941587, CVE-2015-5963) last seen 2020-06-05 modified 2015-09-21 plugin id 86047 published 2015-09-21 reporter This script is Copyright (C) 2015-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/86047 title openSUSE Security Update : python-Django (openSUSE-2015-592)
Redhat
| advisories |
| ||||||||||||||||
| rpms |
|
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html
- http://lists.opensuse.org/opensuse-updates/2015-09/msg00026.html
- http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html
- http://rhn.redhat.com/errata/RHSA-2015-1766.html
- http://rhn.redhat.com/errata/RHSA-2015-1767.html
- http://rhn.redhat.com/errata/RHSA-2015-1894.html
- http://www.debian.org/security/2015/dsa-3338
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/76428
- http://www.securitytracker.com/id/1033318
- http://www.ubuntu.com/usn/USN-2720-1
- https://access.redhat.com/errata/RHSA-2015:1876
- https://www.djangoproject.com/weblog/2015/aug/18/security-releases/