CVE-2015-0221: canonical ubuntu_linux Resource Management Errors
Vulnerability summary
CVE-2015-0221 is a medium (CVSS 5.0) Resource Management Errors vulnerability in canonical ubuntu_linux. EPSS estimates a 4.37% chance of exploitation in the next 30 days, higher than 91.2% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 3Timeline
- 16-01-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.
CVSS metrics
3 scores · 2 sources · 3 versionsEPSS trend
Probability
4.37%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
No change 0.00 pp
From 4.37% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (djangoproject.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Canonical1 product
- ubuntu_linuxEOL10.04 | 12.04 | 14.04 | 14.10
Debian1 product
- python-django< 1.7.1-1.1
Djangoproject1 product
- djangoEOL≤ 1.4.17 | 1.6 | 1.6.1 | 1.6.2 | 1.6.3 | 1.6.4 | 1.6.5 | 1.6.6 | 1.6.7 | 1.6.8 | 1.6.9 | 1.7 | 1.7.1 | 1.7.2
PyPI1 product
- django< 1.4.18 | ≥ 1.6, < 1.6.10 | ≥ 1.7, < 1.7.3
Ubuntu1 product
- python-django< 1.6.1-2ubuntu0.6
5 vendors · 5 products
References
31 links- lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.htmlVendor AdvisoryX Refsource FEDORAWEB
- lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.htmlVendor AdvisoryX Refsource FEDORAWEB
- www.djangoproject.com/weblog/2015/jan/13/security/X Refsource CONFIRMExploitPatchVendor AdvisoryARTICLEREPORT
Show all 31 references
- lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.htmlVendor AdvisoryX Refsource FEDORAWEB
