logo

Database

Improper resource allocation - Buffer overflow In django

Description

Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2012-34442. NVD-2012-34443. OSV-2012-34444. OSV-DEBIAN-2012-34445. GCVE-2012-34446. SECURITY-TRACKER-CVE-2012-3444

References

1. https://github.com/django/django/commit/9ca0ff6268eeff92d0d0ac2c315d4b6a8e2291552. https://github.com/django/django/commit/b2eb4787a0fff9c9993b78be5c698e85108f34463. https://github.com/django/django/commit/c14f325c4eef628bc7bfd8873c3a72aeb02191414. https://github.com/django/django/commit/da33d67181b53fe6cc737ac1220153814a1509f65. https://github.com/django/django/commit/dd16b17099b7d86f27773df048c5014cf439b2826. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2012-4.yaml7. https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued8. http://www.debian.org/security/2012/dsa-25299. http://www.mandriva.com/security/advisories?name=MDVSA-2012:14310. http://www.openwall.com/lists/oss-security/2012/07/31/111. http://www.openwall.com/lists/oss-security/2012/07/31/212. http://www.ubuntu.com/usn/USN-1560-1

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.