CVE-2013-2099

no score yetEPSS 4.9%

No CVSS score yet. EPSS 4.9% chance of exploitation in the next 30 days.

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.

EPSS: 4.9% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2013-10-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
python:python

References

http://bugs.python.org/issue17980
http://rhn.redhat.com/errata/RHSA-2014-1690.html
http://secunia.com/advisories/55107
http://secunia.com/advisories/55116
http://www.openwall.com/lists/oss-security/2013/05/16/6

Check your stack JSON