Symfony Password Hash Denial Of Service Vulnerability
BID:63005
Info
Symfony Password Hash Denial Of Service Vulnerability
| Bugtraq ID: | 63005 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-5958 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 10 2013 12:00AM |
| Updated: | Apr 16 2015 05:50PM |
| Credit: | Christophe Coevoet |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Symfony Password Hash Denial Of Service Vulnerability
Symfony is prone to a denial-of-service vulnerability.
Successful exploits may allow the attacker to cause denial-of-service conditions.
Versions prior to Symfony 2.0.25, 2.1.13, 2.2.9 and 2.3.6 are vulnerable.
Symfony is prone to a denial-of-service vulnerability.
Successful exploits may allow the attacker to cause denial-of-service conditions.
Versions prior to Symfony 2.0.25, 2.1.13, 2.2.9 and 2.3.6 are vulnerable.
Exploit / POC
Symfony Password Hash Denial Of Service Vulnerability
An attacker can use a browser to exploit this issue.
An attacker can use a browser to exploit this issue.
Solution / Fix
Symfony Password Hash Denial Of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Symfony Password Hash Denial Of Service Vulnerability
References:
References: