An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)

The detected version of the Django Python package, Django, is 4.2.x prior to 4.2.18, 5.0.x prior to 5.0.11 or 5.1.x prior to 5.1.5. It is, therefore, affected by a denial of service vulnerability as disclosed in Django's January 14th 2025 security advisory. A lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address were vulnerable, as was the django.forms.GenericIPAddressField form field, which has now been updated to define a max_length of 39 characters.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0777 advisory.

    Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing     IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to     individual teams, while automation developers retain the freedom to write tasks that leverage existing     knowledge without the overhead. Ansible Automation Platform makes it possible for users across an     organization to share, vet, and manage automation content by means of a simple, powerful, and agentless     language.

    Security Fix(es):

    * automation-controller: Jinja has a sandbox breakout through indirect reference to format method     (CVE-2024-56326)
    * automation-controller: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)
    * automation-controller: Django: potential denial-of-service vulnerability in IPv6 validation     (CVE-2024-56374)
    * python3.11-django: potential denial-of-service vulnerability in IPv6 validation (CVE-2024-56374)
    * python3.11-django: Potential denial-of-service in django.utils.html.strip_tags() (CVE-2024-53907)
    * python3.11-jinja2: Jinja has a sandbox breakout through indirect reference to format method     (CVE-2024-56326)
    * python3.11-jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Updates and fixes included:

    Automation controller
    * Fixed an issue where the order of source inventories was not respected by the ansible.controller     collection (AAP-38524)
    * Fixed an issue where an actively running job on an execution node may have had its folder deleted by a     system task (AAP-38137)
    * automation-controller has been updated to 4.6.7

    Event-Driven Ansible:
    * Fixed an issue where users were unable to filter Rule Audits by rulebook activation name (AAP-39253)
    * Users are now able to create a new Event-Driven Ansible credential by copying an existing one     (AAP-39249)
    * Added support for file and env injectors for Credentials (AAP-39091)
    * Fixed an issue where the input field of the injector configuration could not be empty (AAP-39086)
    * Fixed an issue where the application version in the openapi spec was incorrectly set (AAP-38392)
    * Fixed an issue where activations were not properly updated in some scenarios with a high load of the     system (AAP-38374)
    * automation-eda-controller has been updated to 1.1.4

    Container-based Ansible Automation Platform
    * Allow user to not provide the Postgresql admin account with external database (AAP-39077)
    * Using PostgreSQL TLS certificate authentication with an external database is now available (AAP-38400)
    * containerized installer setup has been updated to 2.5-9

    RPM-based Ansible Automation Platform
    * Fixed an issue where gateway could not be setup with custom SSL certificates (AAP-38985)
    * Fixed an issue where the gateway services are not restarted when a dependency changes (AAP-38918)
    * Fixed an issue where setting automationedacontroller_max_running_activations could cause the installer     to fail (AAP-38708)
    * ansible-automation-platform-installer and installer setup have been updated to 2.5-8

    Additional changes:
    * python3.11-django has been updated to 4.2.18
    * python3.11-jinja2 has been updated to 3.1.5
    * python3.11-pulpcore has been updated to 3.49.30

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4030 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4030-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     January 23, 2025                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : python-django     Version        : 2:2.2.28-1~deb11u5     CVE ID         : CVE-2024-56374     Debian Bug     : 1093049

    It was discovered that there was potential Denial of Service (DoS)     vulnerability in Django, the Python-based web development framework.

    The lack of upper-bound limit enforcement in IPv6 validation could     have led to a potential denial-of-service attack. The undocumented     and private clean_ipv6_address and is_valid_ipv6_address functions     were vulnerable, as was the GenericIPAddressField form field.

    For Debian 11 bullseye, this problem has been fixed in version     2:2.2.28-1~deb11u5.

    We recommend that you upgrade your python-django packages.

    For the detailed security status of python-django please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/python-django

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7205-2 advisory.

    USN-7205-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04     LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0149-1 advisory.

    - CVE-2024-56374: Fixed lack of upper bound limit enforcement in strings when performing IPv6 validation     that could lead to denial of service (bsc#1235856)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7205-1 advisory.

    It was discovered that Django incorrectly handled certain IPv6 strings. An attacker could possibly use     this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
214945	Python Library Django 4.2.x < 4.2.18 / 5.0.x < 5.0.11 / 5.1.x < 5.1.5 DoS	Nessus	Misc.	medium
214718	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2025:0777)	Nessus	Red Hat Local Security Checks	medium
214548	Debian dla-4030 : python-django-doc - security update	Nessus	Debian Local Security Checks	medium
214543	Ubuntu 18.04 LTS : Django vulnerability (USN-7205-2)	Nessus	Ubuntu Local Security Checks	medium
214291	SUSE SLES15 / openSUSE 15 Security Update : python-Django (SUSE-SU-2025:0149-1)	Nessus	SuSE Local Security Checks	medium
214146	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Django vulnerability (USN-7205-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2024-56374

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium