Django 'strip_tags()' Function Denial of Service Vulnerability

Bugtraq ID:	73322
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-2316
Remote:	Yes
Local:	No
Published:	Mar 18 2015 12:00AM
Updated:	Mar 18 2015 12:00AM
Credit:	Andrey Babak
Vulnerable:	Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Djangoproject Django 1.7.6 Djangoproject Django 1.7.3 Djangoproject Django 1.7 Djangoproject Django 1.6.10 Djangoproject Django 1.6.6 Djangoproject Django 1.6.3 Djangoproject Django 1.6.2 Djangoproject Django 1.6 Djangoproject Django 1.8 beta 2 Djangoproject Django 1.8 beta 1 Djangoproject Django 1.7.2 Djangoproject Django 1.7.1 Djangoproject Django 1.7 Rc3 Djangoproject Django 1.7 RC2 Djangoproject Django 1.7 Rc1 Djangoproject Django 1.7 rc 3 Djangoproject Django 1.7 Beta4 Djangoproject Django 1.7 Beta3 Djangoproject Django 1.7 Beta2 Djangoproject Django 1.7 Beta1 Djangoproject Django 1.7 beta 4 Djangoproject Django 1.7 beta 3 Djangoproject Django 1.7 beta 2 Djangoproject Django 1.7 beta Djangoproject Django 1.6.9 Djangoproject Django 1.6.8 Djangoproject Django 1.6.7 Djangoproject Django 1.6.5 Djangoproject Django 1.6.4 Djangoproject Django 1.6.1 Djangoproject Django 1.6 Beta4 Djangoproject Django 1.6 Beta3 Djangoproject Django 1.6 Beta2 Djangoproject Django 1.6 Beta1 Djangoproject Django 1.6 beta 1 Djangoproject Django 1.6 Djangoproject Django 1.4
Not Vulnerable:	Djangoproject Django 1.8 beta 3 Djangoproject Django 1.7.7 Djangoproject Django 1.6.11 Djangoproject Django 1.4.20

Django 'strip_tags()' Function Denial of Service Vulnerability

Django is prone to a denial-of-service vulnerability.

A remote attacker may exploit this issue to cause an infinite loop, resulting in a denial-of-service condition.