CVE Vulnerabilities

CVE-2007-5712

Published: Oct 30, 2007 | Modified: Apr 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.6 LOW
AV:N/AC:H/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
LOW
root.io logo minimus.io logo echo.ai logo

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Affected Software

NameVendorStart VersionEnd Version
DjangoDjango_project0.91 (including)0.91 (including)
DjangoDjango_project0.95 (including)0.95 (including)
DjangoDjango_project0.95.1 (including)0.95.1 (including)
DjangoDjango_project0.96 (including)0.96 (including)
Python-djangoUbuntufeisty*
Python-djangoUbuntugutsy*
Python-djangoUbuntuupstream*

References