Symfony CVE-2014-5244 Remote Denial of Service Vulnerability

Bugtraq ID:	70107
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-5245
Remote:	Yes
Local:	No
Published:	Sep 03 2014 12:00AM
Updated:	Apr 13 2015 09:34PM
Credit:	Chris McCafferty
Vulnerable:	Symfony Symfony 2.3.6 Symfony Symfony 2.3.5 Symfony Symfony 2.2.9 Symfony Symfony 2.2.8 Symfony Symfony 2.1.13 Symfony Symfony 2.1.12 Symfony Symfony 2.0.25 Symfony Symfony 2.0.24 Symfony Symfony 2.5.2 Symfony Symfony 2.5.1 Symfony Symfony 2.4.8 Symfony Symfony 2.4.7 Symfony Symfony 2.3.18 Symfony Symfony 2.3.17
Not Vulnerable:	Symfony Symfony 2.5.4 Symfony Symfony 2.4.9 Symfony Symfony 2.3.19

Symfony CVE-2014-5244 Remote Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symfony CVE-2014-5244 Remote Denial of Service Vulnerability

References:

• CVE-2014-5244: Denial of service with a malicious HTTP Host header (Symfony)
  
• Symfony Homepage (SensioLabs)