An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uri_to_iri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-py-djangoalpine-linux-upgrade-py3-django | Nov 8, 2019 | Aug 2, 2019 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Aug 2, 2019 | |
| Debian | debian-upgrade-python-django | Aug 13, 2019 | Aug 2, 2019 | |
| Freebsd | freebsd-upgrade-package-py27-django111freebsd-upgrade-package-py35-django111freebsd-upgrade-package-py36-django111freebsd-upgrade-package-py37-django111freebsd-upgrade-package-py27-django21freebsd-upgrade-package-py35-django21freebsd-upgrade-package-py36-django21freebsd-upgrade-package-py37-django21freebsd-upgrade-package-py27-django22freebsd-upgrade-package-py35-django22freebsd-upgrade-package-py36-django22freebsd-upgrade-package-py37-django22 | Aug 4, 2019 | Aug 3, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-python-django | May 1, 2020 | Aug 2, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-python-django-1-11-23-11-4-14-0-1-3-0oracle-solaris-11-4-upgrade-library-python-django-27-1-11-23-11-4-14-0-1-3-0oracle-solaris-11-4-upgrade-library-python-django-34-1-11-23-11-4-14-0-1-3-0oracle-solaris-11-4-upgrade-library-python-django-35-1-11-23-11-4-14-0-1-3-0oracle-solaris-11-4-upgrade-library-python-django-37-1-11-23-11-4-14-0-1-3-0 | Oct 16, 2019 | Aug 2, 2019 | |
| Suse | — | suse-upgrade-python3-django | Aug 9, 2019 | Aug 1, 2019 |
| Ubuntu | ubuntu-upgrade-python-djangoubuntu-upgrade-python3-django | Aug 2, 2019 | Aug 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub