Packagist/symfony/security CVE-2016-4423: high 7.5, EPSS 1.86%

Symphony Denial of Service Via Overlong Usernames

Action: Upgrade symfony/security to 2.3.41 or later.

composer require symfony/security:2.3.41

composer require symfony/security:2.7.13

composer require symfony/security:2.8.6

composer require symfony/security:3.0.6

Affected

Fixed versions

Sources

• osv: GHSA-whgv-8cg3-7hcm#Packagist/symfony/security
• https://nvd.nist.gov/vuln/detail/CVE-2016-4423
• https://github.com/symfony/symfony/pull/18733
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2016-4423.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2016-4423.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2016-4423.yaml
• https://github.com/symfony/symfony
• https://symfony.com/blog/cve-2016-4423-large-username-storage-in-session
• https://symfony.com/cve-2016-4423
• http://www.debian.org/security/2016/dsa-3588

CVE-2016-4423 · published 2022-05-17T03:54:47Z · modified 2024-12-08T05:43:41.795128Z · JSON