Staging Environment: Content and features may be unstable or change without notice.
Advisory details: ubuntu_osv / UBUNTU-CVE-2013-2099
Advisory ID ubuntu_osv/UBUNTU-CVE-2013-2099
Aliases CVE-2013-2099
Summary Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.
Status Published
Exploitability 0.5
Weighted Severity 2.7
Risk 1.4
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
ubuntu-priority low https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-2099.json
Reference id Reference type URL
http://bugs.python.org/issue17980
https://ubuntu.com/security/CVE-2013-2099
https://ubuntu.com/security/notices/USN-1983-1
https://ubuntu.com/security/notices/USN-1984-1
https://ubuntu.com/security/notices/USN-1985-1
https://www.cve.org/CVERecord?id=CVE-2013-2099
http://www.openwall.com/lists/oss-security/2013/05/16/6

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.