Eric Peterson

**Name of the Vulnerable Software and Affected Versions** Django versions 1.5.x through 1.6.x Django versions 1.7.x before 1.7.9 Django versions 1.8.x before 1.8.3 Django versions prior to 1.4.21 **Description** The issue is related to resource management errors in the Django web application platform. It can be exploited by a remote attacker to cause a denial of service by creating multiple requests with unique session keys, leading to session store consumption. **Recommendations** For Django versions 1.5.x through 1.6.x, update to a version outside of this range to resolve the issue. For Django versions 1.7.x before 1.7.9, update to version 1.7.9 or later. For Django versions 1.8.x before 1.8.3, update to version 1.8.3 or later. For Django versions prior to 1.4.21, update to version 1.4.21 or later.

**Name of the Vulnerable Software and Affected Versions** OpenStack Dashboard (Horizon) versions prior to 2014.1.3 OpenStack Dashboard (Horizon) versions 2014.2.x prior to 2014.2.1 **Description** The issue arises from improper handling of session records when using a db or memcached session engine. This allows remote attackers to cause a denial of service by sending a large number of requests to the login page. **Recommendations** For versions prior to 2014.1.3, update to version 2014.1.3 or later. For versions 2014.2.x prior to 2014.2.1, update to version 2014.2.1 or later.