CVE-2007-5712
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory…
Does this matter?
Lower severity and a low EPSS score (1.81%). Track it; it rarely justifies an emergency change on its own.
Description
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.
- CVSS 2.0
- 2.6 LOWAV:N/AC:H/Au:N/C:N/I:N/A:P
- EPSS
- 1.81% probability · 77th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- django project/django
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/27435Patch, Vendor Advisory
- http://secunia.com/advisories/27597Vendor Advisory
- http://secunia.com/advisories/31961Vendor Advisory
- http://sourceforge.net/forum/forum.php?forum_id=749199
- http://www.debian.org/security/2008/dsa-1640Patch
- http://www.djangoproject.com/weblog/2007/oct/26/security-fixPatch
- http://www.securityfocus.com/bid/26227
- http://www.vupen.com/english/advisories/2007/3660Vendor Advisory
- http://www.vupen.com/english/advisories/2007/3661Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38143
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html
- http://secunia.com/advisories/27435Patch, Vendor Advisory
- http://secunia.com/advisories/27597Vendor Advisory
- http://secunia.com/advisories/31961Vendor Advisory
- http://sourceforge.net/forum/forum.php?forum_id=749199
- http://www.debian.org/security/2008/dsa-1640Patch
- http://www.djangoproject.com/weblog/2007/oct/26/security-fixPatch
- http://www.securityfocus.com/bid/26227
- http://www.vupen.com/english/advisories/2007/3660Vendor Advisory
- http://www.vupen.com/english/advisories/2007/3661Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38143
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.