CVE-2013-5958

The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a…

published December 27, 2014

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a similar issue to CVE-2013-5750.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01868 · 79.2th percentile
Published
2014-12-27T18:00Z
EPSS history
Timeline
  • 27 DEC 18:00Z
    The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a…
    cvelistv5