CVE-2024-56374
Fixed in a distro release EPSS 1%CVSS 5.8
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)
Products: djangoproject django
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | django | 5.1.5 |
| PyPI | django | 5.0.11 |
| PyPI | django | 4.2.18 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | awx | 24.6.1-r3 |
| Chainguard | py3-django | 5.1.5-r0 |
| Chainguard | py3-supported-django | 5.1.5-r0 |
| Chainguard | py3.10-django | 5.1.5-r0 |
| Chainguard | py3.10-django-bin | 5.1.5-r0 |
| Chainguard | py3.11-django | 5.1.5-r0 |
| Chainguard | py3.11-django-bin | 5.1.5-r0 |
| Chainguard | py3.12-django | 5.1.5-r0 |
| Chainguard | py3.12-django-bin | 5.1.5-r0 |
| Chainguard | py3.13-django | 5.1.5-r0 |
| Chainguard | py3.13-django-bin | 5.1.5-r0 |
| Debian 11 | python-django | 2:2.2.28-1~deb11u5 |
| Debian 12 | python-django | 3:3.2.25-0+deb12u1 |
| Debian 13 | python-django | 3:4.2.18-1 |
| Debian 14 | python-django | 3:4.2.18-1 |
| Red Hat ansible automation platform 2.5 | automation-controller-venv-tower | 0:4.6.7-1.el8ap |
| Red Hat ansible automation platform 2.5 | automation-controller-venv-tower | 0:4.6.7-1.el9ap |
| Red Hat ansible automation platform 2.5 | python3.11-django | 0:4.2.18-1.el8ap |
| Red Hat ansible automation platform 2.5 | python3.11-django | 0:4.2.18-1.el9ap |
| Red Hat ansible automation platform 2.5 | python3.11-jinja2 | 0:3.1.5-1.el8ap |
| Red Hat ansible automation platform 2.5 | python3.11-jinja2 | 0:3.1.5-1.el9ap |
| Red Hat ansible automation platform developer 2.5 | python3.11-django | 0:4.2.18-1.el9ap |
| Red Hat ansible automation platform developer 2.5 | python3.11-django | 0:4.2.18-1.el8ap |
| Red Hat ansible automation platform developer 2.5 | python3.11-jinja2 | 0:3.1.5-1.el9ap |
| Red Hat ansible automation platform developer 2.5 | python3.11-jinja2 | 0:3.1.5-1.el8ap |
| Red Hat ansible automation platform inside 2.5 | python3.11-jinja2 | 0:3.1.5-1.el8ap |
| Red Hat ansible automation platform inside 2.5 | python3.11-jinja2 | 0:3.1.5-1.el9ap |
| Red Hat satellite 6.16 | candlepin | 0:4.4.21-1.el9sat |
| Red Hat satellite 6.16 | candlepin | 0:4.4.21-1.el8sat |
| Red Hat satellite 6.16 | candlepin-selinux | 0:4.4.21-1.el8sat |
| Red Hat satellite 6.16 | candlepin-selinux | 0:4.4.21-1.el9sat |
| Red Hat satellite 6.16 | foreman | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-cli | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-cli | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-debug | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-debug | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-dynflow-sidekiq | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-dynflow-sidekiq | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-ec2 | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-ec2 | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-installer | 1:3.12.0.4-2.el8sat |
| Red Hat satellite 6.16 | foreman-installer | 1:3.12.0.4-2.el9sat |
| Red Hat satellite 6.16 | foreman-installer-katello | 1:3.12.0.4-2.el8sat |
| Red Hat satellite 6.16 | foreman-installer-katello | 1:3.12.0.4-2.el9sat |
| Red Hat satellite 6.16 | foreman-journald | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-journald | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-libvirt | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-libvirt | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-openstack | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-openstack | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-ovirt | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-ovirt | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-pcp | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-pcp | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-postgresql | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-postgresql | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-redis | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-redis | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-service | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-service | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-telemetry | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | foreman-telemetry | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-vmware | 0:3.12.0.6-1.el8sat |
| Red Hat satellite 6.16 | foreman-vmware | 0:3.12.0.6-1.el9sat |
| Red Hat satellite 6.16 | python-django | 0:4.2.19-1.el8pc |
| Red Hat satellite 6.16 | python-django | 0:4.2.19-1.el9pc |
| Red Hat satellite 6.16 | python-jinja2 | 0:3.1.5-1.el9pc |
| Red Hat satellite 6.16 | python-jinja2 | 0:3.1.5-1.el8pc |
| Red Hat satellite 6.16 | python-pulp-cli | 0:0.29.2-2.el8pc |
| Red Hat satellite 6.16 | python-pulp-cli | 0:0.29.2-2.el9pc |
| Red Hat satellite 6.16 | python-pulp-container | 0:2.20.5-1.el8pc |
| Red Hat satellite 6.16 | python-pulp-container | 0:2.20.5-1.el9pc |
| Red Hat satellite 6.16 | python-pulp-glue | 0:0.29.2-2.el8pc |
| Red Hat satellite 6.16 | python-pulp-glue | 0:0.29.2-2.el9pc |
| Red Hat satellite 6.16 | python-pulpcore | 0:3.49.33-1.el8pc |
| Red Hat satellite 6.16 | python-pulpcore | 0:3.49.33-1.el9pc |
| Red Hat satellite 6.16 | python-requests | 0:2.32.3-2.el9pc |
| Red Hat satellite 6.16 | python-requests | 0:2.32.3-2.el8pc |
| Red Hat satellite 6.16 | python3.11-django | 0:4.2.19-1.el9pc |
| Red Hat satellite 6.16 | python3.11-django | 0:4.2.19-1.el8pc |
| Red Hat satellite 6.16 | python3.11-jinja2 | 0:3.1.5-1.el9pc |
| Red Hat satellite 6.16 | python3.11-jinja2 | 0:3.1.5-1.el8pc |
| Red Hat satellite 6.16 | python3.11-pulp-cli | 0:0.29.2-2.el9pc |
| Red Hat satellite 6.16 | python3.11-pulp-cli | 0:0.29.2-2.el8pc |
| Red Hat satellite 6.16 | python3.11-pulp-container | 0:2.20.5-1.el9pc |
| Red Hat satellite 6.16 | python3.11-pulp-container | 0:2.20.5-1.el8pc |
| Red Hat satellite 6.16 | python3.11-pulp-glue | 0:0.29.2-2.el9pc |
| Red Hat satellite 6.16 | python3.11-pulp-glue | 0:0.29.2-2.el8pc |
| Red Hat satellite 6.16 | python3.11-pulpcore | 0:3.49.33-1.el8pc |
| Red Hat satellite 6.16 | python3.11-pulpcore | 0:3.49.33-1.el9pc |
| Red Hat satellite 6.16 | python3.11-requests | 0:2.32.3-2.el9pc |
| Red Hat satellite 6.16 | python3.11-requests | 0:2.32.3-2.el8pc |
| Red Hat satellite 6.16 | rubygem-foreman_ansible | 0:14.2.3-1.el9sat |
| Red Hat satellite 6.16 | rubygem-foreman_ansible | 0:14.2.3-1.el8sat |
| Red Hat satellite 6.16 | rubygem-foreman_maintain | 1:1.7.12-1.el9sat |
| Red Hat satellite 6.16 | rubygem-foreman_maintain | 1:1.7.12-1.el8sat |
| Red Hat satellite 6.16 | rubygem-foreman_openscap | 0:9.0.5-1.el8sat |
| Red Hat satellite 6.16 | rubygem-foreman_openscap | 0:9.0.5-1.el9sat |
| Red Hat satellite 6.16 | rubygem-foreman_remote_execution | 0:13.2.7-1.el9sat |
| Red Hat satellite 6.16 | rubygem-foreman_remote_execution | 0:13.2.7-1.el8sat |
| Red Hat satellite 6.16 | rubygem-foreman_remote_execution-cockpit | 0:13.2.7-1.el8sat |
| Red Hat satellite 6.16 | rubygem-foreman_remote_execution-cockpit | 0:13.2.7-1.el9sat |
| Red Hat satellite 6.16 | rubygem-foreman_theme_satellite | 0:13.3.5-1.el9sat |
| Red Hat satellite 6.16 | rubygem-foreman_theme_satellite | 0:13.3.5-1.el8sat |
| Red Hat satellite 6.16 | rubygem-katello | 0:4.14.0.8-1.el9sat |
| Red Hat satellite 6.16 | rubygem-katello | 0:4.14.0.8-1.el8sat |
| Red Hat satellite 6.16 | satellite | 0:6.16.3-2.el9sat |
| Red Hat satellite 6.16 | satellite | 0:6.16.3-2.el8sat |
| Red Hat satellite 6.16 | satellite-cli | 0:6.16.3-2.el9sat |
| Red Hat satellite 6.16 | satellite-cli | 0:6.16.3-2.el8sat |
| Red Hat satellite 6.16 | satellite-common | 0:6.16.3-2.el8sat |
| Red Hat satellite 6.16 | satellite-common | 0:6.16.3-2.el9sat |
| Red Hat satellite 6.16 | scap-security-guide-satellite | 0:1.0.0-1.el9sat |
| Red Hat satellite 6.16 | scap-security-guide-satellite | 0:1.0.0-1.el8sat |
| Red Hat satellite 6.17 | python-django | 0:4.2.19-1.el9pc |
| Red Hat satellite 6.17 | python-jinja2 | 0:3.1.5-1.el9pc |
| Red Hat satellite 6.17 | python3.11-django | 0:4.2.19-1.el9pc |
| Red Hat satellite 6.17 | python3.11-jinja2 | 0:3.1.5-1.el9pc |
| Red Hat satellite 6.17 | rubygem-graphql | 0:1.13.24-1.el9sat |
| Red Hat satellite 6.17 | rubygem-rack | 0:2.2.13-1.el9sat |
| Red Hat satellite capsule 6.16 | foreman | 0:3.12.0.6-1.el9sat |
| Red Hat satellite capsule 6.16 | foreman | 0:3.12.0.6-1.el8sat |
| Red Hat satellite capsule 6.16 | foreman-debug | 0:3.12.0.6-1.el9sat |
| Red Hat satellite capsule 6.16 | foreman-debug | 0:3.12.0.6-1.el8sat |
| Red Hat satellite capsule 6.16 | foreman-installer | 1:3.12.0.4-2.el8sat |
| Red Hat satellite capsule 6.16 | foreman-installer | 1:3.12.0.4-2.el9sat |
| Red Hat satellite capsule 6.16 | foreman-installer-katello | 1:3.12.0.4-2.el9sat |
| Red Hat satellite capsule 6.16 | foreman-installer-katello | 1:3.12.0.4-2.el8sat |
| Red Hat satellite capsule 6.16 | foreman-pcp | 0:3.12.0.6-1.el9sat |
| Red Hat satellite capsule 6.16 | foreman-pcp | 0:3.12.0.6-1.el8sat |
| Red Hat satellite capsule 6.16 | python-django | 0:4.2.19-1.el8pc |
| Red Hat satellite capsule 6.16 | python-django | 0:4.2.19-1.el9pc |
| Red Hat satellite capsule 6.16 | python-jinja2 | 0:3.1.5-1.el8pc |
| Red Hat satellite capsule 6.16 | python-jinja2 | 0:3.1.5-1.el9pc |
| Red Hat satellite capsule 6.16 | python-pulp-cli | 0:0.29.2-2.el8pc |
| Red Hat satellite capsule 6.16 | python-pulp-cli | 0:0.29.2-2.el9pc |
| Red Hat satellite capsule 6.16 | python-pulp-container | 0:2.20.5-1.el8pc |
| Red Hat satellite capsule 6.16 | python-pulp-container | 0:2.20.5-1.el9pc |
| Red Hat satellite capsule 6.16 | python-pulp-glue | 0:0.29.2-2.el9pc |
| Red Hat satellite capsule 6.16 | python-pulp-glue | 0:0.29.2-2.el8pc |
| Red Hat satellite capsule 6.16 | python-pulpcore | 0:3.49.33-1.el9pc |
| Red Hat satellite capsule 6.16 | python-pulpcore | 0:3.49.33-1.el8pc |
| Red Hat satellite capsule 6.16 | python-requests | 0:2.32.3-2.el9pc |
| Red Hat satellite capsule 6.16 | python-requests | 0:2.32.3-2.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-django | 0:4.2.19-1.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-django | 0:4.2.19-1.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-jinja2 | 0:3.1.5-1.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-jinja2 | 0:3.1.5-1.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-pulp-cli | 0:0.29.2-2.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-pulp-cli | 0:0.29.2-2.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-pulp-container | 0:2.20.5-1.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-pulp-container | 0:2.20.5-1.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-pulp-glue | 0:0.29.2-2.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-pulp-glue | 0:0.29.2-2.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-pulpcore | 0:3.49.33-1.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-pulpcore | 0:3.49.33-1.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-requests | 0:2.32.3-2.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-requests | 0:2.32.3-2.el8pc |
| Red Hat satellite capsule 6.16 | rubygem-foreman_maintain | 1:1.7.12-1.el8sat |
| Red Hat satellite capsule 6.16 | rubygem-foreman_maintain | 1:1.7.12-1.el9sat |
| Red Hat satellite capsule 6.16 | satellite | 0:6.16.3-2.el8sat |
| Red Hat satellite capsule 6.16 | satellite | 0:6.16.3-2.el9sat |
| Red Hat satellite capsule 6.16 | satellite-capsule | 0:6.16.3-2.el8sat |
| Red Hat satellite capsule 6.16 | satellite-capsule | 0:6.16.3-2.el9sat |
| Red Hat satellite capsule 6.16 | satellite-common | 0:6.16.3-2.el9sat |
| Red Hat satellite capsule 6.16 | satellite-common | 0:6.16.3-2.el8sat |
| Red Hat satellite capsule 6.17 | python-django | 0:4.2.19-1.el9pc |
| Red Hat satellite capsule 6.17 | python-jinja2 | 0:3.1.5-1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-django | 0:4.2.19-1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-jinja2 | 0:3.1.5-1.el9pc |
| Red Hat satellite capsule 6.17 | rubygem-rack | 0:2.2.13-1.el9sat |
| Red Hat satellite maintenance 6.16 | rubygem-foreman_maintain | 1:1.7.12-1.el8sat |
| Red Hat satellite maintenance 6.16 | rubygem-foreman_maintain | 1:1.7.12-1.el9sat |
| Red Hat satellite utils 6.16 | foreman | 0:3.12.0.6-1.el8sat |
| Red Hat satellite utils 6.16 | foreman | 0:3.12.0.6-1.el9sat |
| Red Hat satellite utils 6.16 | foreman-cli | 0:3.12.0.6-1.el8sat |
| Red Hat satellite utils 6.16 | foreman-cli | 0:3.12.0.6-1.el9sat |
| Red Hat satellite utils 6.16 | satellite | 0:6.16.3-2.el8sat |
| Red Hat satellite utils 6.16 | satellite | 0:6.16.3-2.el9sat |
| Red Hat satellite utils 6.16 | satellite-cli | 0:6.16.3-2.el8sat |
| Red Hat satellite utils 6.16 | satellite-cli | 0:6.16.3-2.el9sat |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | python-Django | 4.2.11-150600.3.15.1 |
| Ubuntu 20.04 LTS | python-django | 2:2.2.12-1ubuntu0.27 |
| Ubuntu 22.04 LTS | python-django | 2:3.2.12-2ubuntu1.16 |
| Ubuntu 24.04 LTS | python-django | 3:4.2.11-1ubuntu1.5 |
| Ubuntu Pro 14.04 LTS | python-django | no fix |
| Ubuntu Pro 16.04 LTS | python-django | no fix |
| Ubuntu Pro 18.04 LTS | python-django | 1:1.11.11-1ubuntu1.21+esm9 |
| Wolfi | py3-django | 5.1.5-r0 |
| Wolfi | py3-supported-django | 5.1.5-r0 |
| Wolfi | py3.10-django | 5.1.5-r0 |
| Wolfi | py3.10-django-bin | 5.1.5-r0 |
| Wolfi | py3.11-django | 5.1.5-r0 |
| Wolfi | py3.11-django-bin | 5.1.5-r0 |
| Wolfi | py3.12-django | 5.1.5-r0 |
| Wolfi | py3.12-django-bin | 5.1.5-r0 |
| Wolfi | py3.13-django | 5.1.5-r0 |
| Wolfi | py3.13-django-bin | 5.1.5-r0 |
| openSUSE Leap 15.6 | python-Django | 4.2.11-150600.3.15.1 |
| openSUSE Tumbleweed | python-Django | 5.1.5-1.1 |
| openSUSE Tumbleweed | python-Django4 | 4.2.18-1.1 |
| openSUSE Tumbleweed | python-Django5 | 5.2.16-1.1 |
| openSUSE Tumbleweed | python-Django6 | 6.0-1.1 |