CVE-2013-5958
Status: ModifiedMedium (5)—
The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a similar issue to CVE-2013-5750.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
- Base score: 5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.87%
- Percentile among all scored CVEs: 79
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-399
References
Raw JSON (NVD)
Show
{
"id": "CVE-2013-5958",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2014-12-27T18:59:01.197",
"references": [
{
"url": "http://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a similar issue to CVE-2013-5750."
},
{
"lang": "es",
"value": "El componente de seguridad en Symfony 2.0.x anterior a 2.0.25, 2.1.x anterior a 2.1.13, 2.2.x anterior a 2.2.9, y 2.3.x anterior a 2.3.6 permite a atacantes remotos causar una denegación de servicio (consumo de CPU) a través de una contraseña larga que lanza un hash con alta carga de computación, como lo demuestra el cálculo PBKDF2, un problema similar a CVE-2013-5750"
}
],
"lastModified": "2026-06-16T23:59:47.993",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "379F1431-3466-4263-8C02-D6541E593F65"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CBEC708-96A2-43DD-88C0-9407ABB6D4FF"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56B52BED-2996-4C96-A348-98A8C72C8EA2"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C6279E7-F362-4C13-A965-908BCF9C30E3"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A101B27-9AE7-4C04-80BC-03A981217782"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3360BFF1-89ED-4294-A503-835C9C40C7D7"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE78FEA0-42E8-463C-9C7C-C778F712BB0F"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF5CEE9C-822C-491F-841C-218AA21C0AD1"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "822F9083-5542-41AA-B9FA-1B43DE633340"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "165F68AE-AB34-4C20-88C6-56210548242B"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B13BE7AA-72FD-402D-8919-BC5F23D03EFD"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34B1B511-5EBC-4301-A561-AE15B63DFC74"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AF62D2D-2D62-4F15-83CD-F635DC838031"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B3A8431-356C-498F-AAEA-EC8D05D74877"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E53A27F2-9C3D-4670-BE1E-A1F6994EF1CA"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18DEB929-6B35-488B-80BF-70448BF7A6F0"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EB03E2D-F137-4CBA-887D-D1461735C958"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D37175A7-C937-4758-8EED-BE24C43AA115"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1EF598F-F8F6-4980-BC76-C2FAF8FE7AF8"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3CD1432-1C91-4DFE-86E0-E5E97775A425"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "768F171C-3625-4696-ACEC-A10FA70F6BF7"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55B048CA-DDD8-473A-88D5-1AA36B134F1B"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23EE797D-54E8-4063-82DB-3D55027DC7DB"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4ECB5DDB-1D4D-4134-94DA-94292571C295"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.0.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "513F2502-A37E-4FC7-B1AF-8978E5A8C22A"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7CD9AD6-5303-41C3-848B-504BFC03307D"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1175DE26-53D0-4411-8416-C60602A097D3"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88E95571-E3F3-4D8F-A03C-C95317D7C4CC"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08CEC939-1319-475E-AE3B-5BFB3D05A38A"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1DB3966-94A2-4154-8449-09C4E44127D1"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5E16EB7-BA1C-4B49-A466-68EC0067D432"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DD23E22-222D-4933-B534-B1E91807D6BB"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D80A3A8-C230-4F81-8852-21985FB6562C"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66D6B609-A832-4FFD-B1AE-D45D82213CC7"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E37287B2-E747-46D7-9779-DA39DE81A6C9"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D5E6292-15C3-413F-A078-FCB6E460A255"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFE4C062-E36D-4A23-9E93-C44C680B11EE"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95E3EF60-CFBF-4E6C-880B-26424EB5D384"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.2:dev:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "892F1A5D-4770-4B23-9FF0-934D7592A3AD"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F79CDFB3-9BE8-4D29-90D0-9A14A7478CE6"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE2FA705-1052-4938-9177-A16CC317C0A4"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "078D5869-B3E3-4046-A942-B63921AD19DB"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "098D9DD8-2113-48BA-A31C-75ED36F010CC"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCEE5787-51E2-40EC-8B6E-FCA049E88381"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CFBB031-DD47-41AB-BC38-D006F6C94FCD"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37873421-811B-45C7-9C75-CF92DEBD8DC3"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B692349E-6ACF-4F39-B334-EB649C03C008"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "815710CF-CD6F-482A-AA49-F5DBD69CC78C"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3614217B-B696-42F5-B700-154DC4A10362"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9F16129-1132-410A-ABF5-07043E748EBE"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86E24535-7FDC-4CD5-9CFF-BE3497D8142A"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39FAF963-1682-42ED-BE1C-04F4D67BC7E8"
},
{
"criteria": "cpe:2.3:a:sensiolabs:symfony:2.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6FAD933-5F1B-443C-833A-A7CA42B3E3AA"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}