VDB
BDU%3A2024-11394
BDU%3A2024-11394
PUBLISHED
CVSS 7.800000190734863 HIGH
Record from fstec · Published December 21, 2024
Risk scores
CVSS 2.0
7.800000190734863
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Canonical Ltd., Сообщество свободного программного обеспечения, ООО «Ред Софт», ООО «РусБИТех-Астра», Red Hat Inc., Django Software Foundation, АО "НППКТ" | openSUSE Tumbleweed, Ubuntu, Debian GNU/Linux, РЕД ОС (запись в едином реестре российских программ №3751), Astra Linux Special Edition (запись в едином реестре российских программ №369), Red Hat Discovery, Red Hat Ansible Automation Platform, SUSE Linux Enterprise Module for Package Hub, OpenSUSE Leap, Django, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913) | |
| Novell Inc., Canonical Ltd., Сообщество свободного программного обеспечения, ООО «Ред Софт», ООО «РусБИТех-Астра», Red Hat, Inc., Django Software Foundation, АО «НППКТ» | openSUSE Tumbleweed, Ubuntu, Debian GNU/Linux, РЕД ОС (запись в едином реестре российских программ №3751), Astra Linux Special Edition (запись в едином реестре российских программ №369), Red Hat Discovery, Red Hat Ansible Automation Platform, SUSE Linux Enterprise Module for Package Hub, OpenSUSE Leap, Django, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), ОСОН ОСнова 3 Оnyx |
Timeline
- Dec 21, 2024 CVE Published
- Sep 23, 2026 CVE Updated
- Oct 7, 2026 Distribution Patch (2 in total, the first dated here)
- Oct 7, 2026 Security Advisory (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln BDU%3A2024-11394
vulnetix vdb fixes BDU%3A2024-11394Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/BDU%253A2024-11394/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://www.djangoproject.com/weblog/2024/dec/04/security-releases/ advisory
- https://docs.djangoproject.com/en/dev/releases/security/ advisory
- https://github.com/advisories/GHSA-8498-2h75-472j url
- https://groups.google.com/g/django-announce url
- https://www.openwall.com/lists/oss-security/2024/12/04/3 url
- https://securityonline.info/django-releases-patches-for-cve-2024-53907-and-cve-2024-53908-to-mitigate-dos-and-sqli-threats/ url
- https://security-tracker.debian.org/tracker/CVE-2024-53907 advisory
- https://access.redhat.com/security/cve/CVE-2024-53907 advisory
- https://www.suse.com/security/cve/CVE-2024-53907.html advisory
- https://ubuntu.com/security/notices/USN-7136-2 advisory
- https://ubuntu.com/security/notices/USN-7136-1 advisory
- https://docs.djangoproject.com/en/5.1/ref/utils/ url
- http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ advisory
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.13/ url
- https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 advisory
- https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 advisory
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/3.2/ url
- https://docs.djangoproject.com/en/dev/releases/4.2.17/ advisory
- https://docs.djangoproject.com/en/dev/releases/5.0.10/ advisory
- https://docs.djangoproject.com/en/dev/releases/5.1.4/ advisory
…and 3 more