CVE catalog

CVE-2024-56374

Django vulnerability

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.28% · Oct 25, 2026

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpython-djangosid3:5.2.18-1fixed
Debianpython-djangoforky3:5.2.17-2fixed
Debianpython-djangotrixie3:4.2.28-0+deb13u2fixed
Debianpython-djangotrixie-security3:4.2.28-0+deb13u1fixed
Debianpython-djangobookworm3:3.2.25-0+deb12u3fixed
Debianpython-djangobookworm-security3:3.2.25-0+deb12u6fixed
Ubuntupython-djangonoble3:4.2.11-1ubuntu1.5fixed
Ubuntupython-django-docnoble3:4.2.11-1ubuntu1.5fixed
Ubuntupython3-djangonoble3:4.2.11-1ubuntu1.5fixed
Ubuntupython-djangopro1:1.11.4-1ubuntu1vulnerable
Ubuntupython-djangopro1:1.11.6-1ubuntu1vulnerable
Ubuntupython-djangopro1:1.11.9-1ubuntu1vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.1vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.2vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.3vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.4vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.5vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.6vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.7vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.8vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.9vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.10vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.11vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.12vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.13vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.14vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.15vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.16vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.17vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.18vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.19vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.20vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm1vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm2vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm3vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm4vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm5vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm6vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm7vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm8vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm9fixed
Ubuntupython-django20.041:1.11.22-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.6-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.9-2ubuntu1vulnerable
Ubuntupython-django20.042:2.2.10-1vulnerable
Ubuntupython-django20.042:2.2.10-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.11-1vulnerable
Ubuntupython-django20.042:2.2.12-1vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.1vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.2vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.3vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.4vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.5vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.6vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.7vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.8vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.9vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.10vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.11vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.12vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.13vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.14vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.15vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.16vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.17vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.18vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.19vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.20vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.21vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.22vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.23vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.24vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.25vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.26vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.27fixed
Ubuntupython-django22.042:2.2.24-1ubuntu1vulnerable
Ubuntupython-django22.042:3.2.12-2vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.1vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.2vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.3vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.4vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.5vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.6vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.7vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.8vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.9vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.10vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.11vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.12vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.13vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.14vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.15vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.16fixed
Ubuntupython-django24.043:4.2.4-1ubuntu2vulnerable
Ubuntupython-django24.043:4.2.8-1vulnerable
Ubuntupython-django24.043:4.2.9-1vulnerable
Ubuntupython-django24.043:4.2.11-1vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1.1vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1.2vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1.3vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1.4vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1.5fixed
Ubuntupython-djangopro1:1.11.4-1ubuntu1vulnerable
Ubuntupython-djangopro1:1.11.6-1ubuntu1vulnerable
Ubuntupython-djangopro1:1.11.9-1ubuntu1vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.1vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.2vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.3vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.4vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.5vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.6vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.7vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.8vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.9vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.10vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.11vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.12vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.13vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.14vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.15vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.16vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.17vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.18vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.19vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.20vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm1vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm2vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm3vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm4vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm5vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm6vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm7vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm8vulnerable
Ubuntupython-djangopro1:1.11.11-1ubuntu1.21+esm9fixed
Ubuntupython-django20.041:1.11.22-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.6-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.9-2ubuntu1vulnerable
Ubuntupython-django20.042:2.2.10-1vulnerable
Ubuntupython-django20.042:2.2.10-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.11-1vulnerable
Ubuntupython-django20.042:2.2.12-1vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.1vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.2vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.3vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.4vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.5vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.6vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.7vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.8vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.9vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.10vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.11vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.12vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.13vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.14vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.15vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.16vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.17vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.18vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.19vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.20vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.21vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.22vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.23vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.24vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.25vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.26vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.27fixed
Ubuntupython-django22.042:2.2.24-1ubuntu1vulnerable
Ubuntupython-django22.042:3.2.12-2vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.1vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.2vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.3vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.4vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.5vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.6vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.7vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.8vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.9vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.10vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.11vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.12vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.13vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.14vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.15vulnerable
Ubuntupython-django22.042:3.2.12-2ubuntu1.16fixed
Ubuntupython-django24.043:4.2.4-1ubuntu2vulnerable
Ubuntupython-django24.043:4.2.8-1vulnerable
Ubuntupython-django24.043:4.2.9-1vulnerable
Ubuntupython-django24.043:4.2.11-1vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1.1vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1.2vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1.3vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1.4vulnerable
Ubuntupython-django24.043:4.2.11-1ubuntu1.5fixed
Susepython-Djangolinux enterprise module for package hub 15 sp64.2.11-150600.3.15.1fixed
Opensusepython-Djangoleap 15.64.2.11-150600.3.15.1fixed
Opensusepython-Django4tumbleweed4.2.18-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpython-djangosourcesid3:4.2.18-1not yet assignedNot reported[1093049]
Debianpython-djangosourceforky3:4.2.18-1not yet assignedNot reported[1093049]
Debianpython-djangosourcetrixie3:4.2.18-1not yet assignedNot reported[1093049]
Debianpython-djangosourcebookworm3:3.2.25-0+deb12u1not yet assignedNot reported[1093049]
Ubuntupython-djangodebnoble3:4.2.11-1ubuntu1.5Not reportedNot reportedNot reported
Ubuntupython-django-docdebnoble3:4.2.11-1ubuntu1.5Not reportedNot reportedNot reported
Ubuntupython3-djangodebnoble3:4.2.11-1ubuntu1.5Not reportedNot reportedNot reported
Ubuntupython-djangodebpro1:1.11.11-1ubuntu1.21+esm9Not reportedUBUNTU-CVE-2024-56374Not reported
Ubuntupython-djangodeb20.042:2.2.12-1ubuntu0.27Not reportedUBUNTU-CVE-2024-56374Not reported
Ubuntupython-djangodeb22.042:3.2.12-2ubuntu1.16Not reportedUBUNTU-CVE-2024-56374Not reported
Ubuntupython-djangodeb24.043:4.2.11-1ubuntu1.5Not reportedUBUNTU-CVE-2024-56374Not reported
Ubuntupython-djangodebpro1:1.11.11-1ubuntu1.21+esm9Not reportedUSN-7205-2Not reported
Ubuntupython-djangodeb20.042:2.2.12-1ubuntu0.27Not reportedUSN-7205-1Not reported
Ubuntupython-djangodeb22.042:3.2.12-2ubuntu1.16Not reportedUSN-7205-1Not reported
Ubuntupython-djangodeb24.043:4.2.11-1ubuntu1.5Not reportedUSN-7205-1Not reported
Susepython-Djangorpmlinux enterprise module for package hub 15 sp64.2.11-150600.3.15.1Not reportedSUSE-SU-2025:0149-1Not reported
Opensusepython-Djangorpmleap 15.64.2.11-150600.3.15.1Not reportedSUSE-SU-2025:0149-1Not reported
Opensusepython-Django4rpmtumbleweed4.2.18-1.1Not reportedOPENSUSE-SU-2025:14651-1Not reported

[Debian bug #1093049]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References