ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ubuntu_linux | Canonical | 10.04 (including) | 10.04 (including) |
| Ubuntu_linux | Canonical | 12.04 (including) | 12.04 (including) |
| Ubuntu_linux | Canonical | 14.04 (including) | 14.04 (including) |
| Ubuntu_linux | Canonical | 14.10 (including) | 14.10 (including) |
| Python-django | Ubuntu | devel | * |
| Python-django | Ubuntu | trusty | * |
| Python-django | Ubuntu | upstream | * |
| Python-django | Ubuntu | utopic | * |