NVD

Id
22249  
Name
CVE-2016-9014  
Description
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-12-09  
Modified Date
2016-12-14  
Seq
2016-9014  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118478 22249 CVE-2016-9014 94068  View
118479 22249 CVE-2016-9014 1037159  View
118480 22249 CVE-2016-9014 USN-3115-1  View
118481 22249 CVE-2016-9014 FEDORA-2016-3eb5a55123  View
118482 22249 CVE-2016-9014 FEDORA-2016-d4571bf555  View
118483 22249 CVE-2016-9014 https://www.djangoproject.com/weblog/2016/nov/01/security-releases/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5458 JVNDB-2016-006231 Django における DNS リバインディング攻撃を実行される脆弱性 Django には、settings.DEBUG が True である場合、DNS リバインディング攻撃を実行される脆弱性が存在します。 CVE-2016-9014 95521 CVE-2016-9014 22249 6.8 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006231.html 2016-11-01 2016-12-15 View