DEBIAN-CVE-2013-2099

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2013-2099
Downstream
DLA-1107-1
Published: 09 Oct 2013, 14:53
Last modified:28 Apr 2026, 20:12

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Oct 2013, 14:53
Published
Vulnerability first disclosed
28 Apr 2026, 20:12
Last Modified
Vulnerability information updated

Description

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.

Affected Systems

  • debian•bzr

    < 2.6.0~bzr6574-1 | < 2.6.0~bzr6574-1 | < 2.6.0~bzr6574-1

  • debian•linkchecker

    < 8.5-1 | < 8.5-1 | < 8.5-1 | < 8.5-1

  • debian•python-tornado

    < 2.4.1-3 | < 2.4.1-3 | < 2.4.1-3 | < 2.4.1-3

  • debian•python-urllib3

    < 1.6-2 | < 1.6-2 | < 1.6-2 | < 1.6-2

  • debian•python2.7

    < 2.7.5-5

References (1)