An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uri_to_iri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Django | Djangoproject | 1.11 (including) | 1.11.23 (excluding) |
| Django | Djangoproject | 2.1 (including) | 2.1.11 (excluding) |
| Django | Djangoproject | 2.2 (including) | 2.2.4 (excluding) |
| Red Hat OpenStack Platform 13.0 (Queens) | RedHat | python-django-0:1.11.27-1.el7ost | * |
| Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS | RedHat | python-django-0:1.11.27-1.el7ost | * |
| Red Hat OpenStack Platform 15.0 (Stein) | RedHat | python-django-0:2.1.11-1.el8ost | * |
| Python-django | Ubuntu | bionic | * |
| Python-django | Ubuntu | devel | * |
| Python-django | Ubuntu | disco | * |
| Python-django | Ubuntu | esm-infra-legacy/trusty | * |
| Python-django | Ubuntu | focal | * |
| Python-django | Ubuntu | jammy | * |
| Python-django | Ubuntu | kinetic | * |
| Python-django | Ubuntu | lunar | * |
| Python-django | Ubuntu | mantic | * |
| Python-django | Ubuntu | noble | * |
| Python-django | Ubuntu | oracular | * |
| Python-django | Ubuntu | trusty | * |
| Python-django | Ubuntu | trusty/esm | * |
| Python-django | Ubuntu | xenial | * |