UBUNTU-CVE-2013-2099
- Source
- https://ubuntu.com/security/CVE-2013-2099
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-2099.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2013-2099
- Upstream
- Related
- Published
- 2013-05-16T00:00:00Z
- Modified
- 2025-07-18T16:42:51Z
- Severity
-
- Ubuntu - low
- Summary
- [none]
- Details
-
Algorithmic complexity vulnerability in the ssl.matchhostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-sslmatch_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.
- References
-
- https://ubuntu.com/security/CVE-2013-2099
- http://www.openwall.com/lists/oss-security/2013/05/16/6
- http://bugs.python.org/issue17980
- https://ubuntu.com/security/notices/USN-1983-1
- https://ubuntu.com/security/notices/USN-1985-1
- https://ubuntu.com/security/notices/USN-1984-1
- https://www.cve.org/CVERecord?id=CVE-2013-2099