PT-2016-5952 · Symfony · Symfony

Marek Alaksa · Publicado 2016-05-29 · Atualizado 2022-05-17 · CVE-2016-4423

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 2.3.41 Symfony versions 2.7.x prior to 2.7.13 Symfony versions 2.8.x prior to 2.8.6 Symfony versions 3.0.x prior to 3.0.6

Description The issue is related to the attemptAuthentication function in Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php, which does not limit the length of a username stored in a session. This allows remote attackers to cause a denial of service (session storage consumption) via a series of authentication attempts with long, non-existent usernames.

Recommendations For Symfony versions prior to 2.3.41, update to version 2.3.41 or later. For Symfony versions 2.7.x prior to 2.7.13, update to version 2.7.13 or later. For Symfony versions 2.8.x prior to 2.8.6, update to version 2.8.6 or later. For Symfony versions 3.0.x prior to 3.0.6, update to version 3.0.6 or later.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-4423

DSA-3588-1

GHSA-WHGV-8CG3-7HCM

Produtos afetados

Symfony

Referências · 17

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2016-4423.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2016-4423.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2016-4423.yaml · Exploit
• https://github.com/symfony/symfony · Nota
• https://github.com/symfony/symfony/pull/18733 · Nota
• https://symfony.com/blog/cve-2016-4423-large-username-storage-in-session · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-4423 · Nota de Segurança
• https://ubuntu.com/security/CVE-2016-4423 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4423 · Nota de Segurança
• http://debian.org/security/2016/dsa-3588 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3588-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-whgv-8cg3-7hcm · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-4423 · Aviso do Fabricante
• https://symfony.com/cve-2016-4423 · Nota
• https://security-tracker.debian.org/tracker/CVE-2016-4423 · Aviso do Fabricante