CVEvulnerability

CVE-2013-2099

4.3 MEDIUM Published 2013-10-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-10-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399

Description

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.

Affected configurations

• python python 3.2.0 • python python 3.2.1 • python python 3.2.2 • python python 3.2.3 • python python 3.2.4 • python python 3.2.5 • python python 3.3.0 • python python 3.3.1 • python python 3.3.2 • canonical ubuntu linux 12.04 • canonical ubuntu linux 12.10 • canonical ubuntu linux 13.04

Related

Weakness · not in database (1)

References