Symfony · Symfony · CVE-2013-5958
**Name of the Vulnerable Software and Affected Versions**
Symfony versions 2.0.x through 2.0.24
Symfony versions 2.1.x through 2.1.12
Symfony versions 2.2.x through 2.2.8
Symfony versions 2.3.x through 2.3.5
**Description**
The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by providing a long password. This triggers an expensive hash computation, such as a PBKDF2 computation.
**Recommendations**
For Symfony versions 2.0.x through 2.0.24, update to version 2.0.25 or later.
For Symfony versions 2.1.x through 2.1.12, update to version 2.1.13 or later.
For Symfony versions 2.2.x through 2.2.8, update to version 2.2.9 or later.
For Symfony versions 2.3.x through 2.3.5, update to version 2.3.6 or later.