Skip to content
Fencer Intel
medium 4.3

CVE-2013-2099 json

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of py…

published 13y ago modified 4mo ago also EUVD-2013-2072

cvss
4.3
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
4.9%
EPSS 4.9% chance of exploitation in 30 days, percentile 92%
public exploits
0
none known

Summary

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.

Patch / fix

  • bzr Debian 13, Debian 12 2.6.0~bzr6574-1
  • linkchecker Debian 14, Debian 13, Debian 12 8.5-1
  • python-tornado Debian 14, Debian 13, Debian 12 2.4.1-3
  • python-urllib3 Debian 14, Debian 13, Debian 12 1.6-2

debian advisories DEBIAN-CVE-2013-2099

  • v8 satellite capsule 6.1, satellite 6.1 1:3.14.5.10-9.el6sat
  • v8 satellite capsule 6.2, satellite 6.2 1:3.14.5.10-11.el7sat
  • tfm satellite capsule 6.1, satellite 6.1 2.0-2.el6sat
  • tfm satellite capsule 6.2, satellite 6.2 2.0-2.el7sat
  • ipxe satellite 6.1 20130517-7.1fm.gitc4bce43.el6sat
  • ipxe satellite 6.2 20160127-1.git6366fa7a.el7
  • hiera satellite capsule 6.1, satellite 6.1 1.3.1-2.el6sat
  • hiera satellite capsule 6.2, satellite 6.2 1.3.1-2.el7sat

red hat advisories RHBA-2016:1500RHSA-2016:1166RHSA-2015:0042RHSA-2014:1263RHSA-2014:1690

Is CVE-2013-2099 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2013-2099 updated cvss 2.6

python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns

  • Red Hat Enterprise Linux 7 bzr
    affected: no fix planned “Will not fix”
  • Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) python-pymongo Red Hat Enterprise Linux OpenStack Platform 6 (Juno) python-pymongo Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) python-bson, python-pymongo, python-pymongo-gridfs Red Hat OpenShift Enterprise 2 python-pymongo
    affected: no fix available
  • Red Hat OpenStack Platform 3 python-backports-ssl_match_hostname Red Hat OpenStack Platform 4 python-pymongo Red Hat Software Collections python33-python-bson, python33-python-pymongo, python33-python-pymongo-gridfs
    affected: no fix planned “Will not fix”
  • Red Hat Common for RHEL Client (v. 6) python-six 1.6.1-1.el6, python-backports 1.0-3.el6, python-urllib3 1.5-5.1.2.el6, python-backports-ssl_match_hostname 3.4.0.2-1.el6 Red Hat Common for RHEL Compute Node (v. 6) python-six 1.6.1-1.el6, python-backports 1.0-3.el6, python-urllib3 1.5-5.1.2.el6, python-backports-ssl_match_hostname 3.4.0.2-1.el6 Red Hat Common for RHEL Server (v. 6) cloud-init 0.7.5-1.el6, python-six 1.6.1-1.el6, python-boto 2.25.0-2.el6, python-backports 1.0-3.el6, python-jsonpatch 1.2-2.el6, python-jsonpointer 1.0-2.el6, +2 more Red Hat Common for RHEL Workstation (v. 6) python-six 1.6.1-1.el6, python-backports 1.0-3.el6, python-urllib3 1.5-5.1.2.el6, python-backports-ssl_match_hostname 3.4.0.2-1.el6
    fixed: vendor fix RHSA-2015:0042
  • Red Hat Enterprise Linux OpenStack Platform 4.0 python-backports-ssl_match_hostname 3.4.0.2-1.el6
    fixed: vendor fix RHSA-2014:1690
  • Red Hat Satellite 6.2 tfm 2.0-2.el6sat, tfm 2.0-2.el7sat, pyserial 2.6-5.el7, hiera 1.3.1-2.el6sat, hiera 1.3.1-2.el7sat, SOAPpy 0.11.6-17.el7, +351 more Red Hat Satellite Capsule 6.2 tfm 2.0-2.el6sat, tfm 2.0-2.el7sat, pyserial 2.6-5.el7, hiera 1.3.1-2.el6sat, hiera 1.3.1-2.el7sat, SOAPpy 0.11.6-17.el7, +173 more
    fixed: vendor fix RHBA-2016:1500
  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) python27 1.1-25.el6, python27-numpy 1.7.1-10.el6, python27-PyYAML 3.10-14.el6, python27-runtime 1.1-25.el6, python27-scipy 0.12.1-3.el6, python27-python 2.7.8-16.el6, +12 more Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) python27 1.1-25.el7, python27-numpy 1.7.1-10.el7, python27-PyYAML 3.10-14.el7, python27-runtime 1.1-25.el7, python27-scipy 0.12.1-4.el7, python27-python 2.7.8-14.el7, +11 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) python27 1.1-25.el6, python27-numpy 1.7.1-10.el6, python27-PyYAML 3.10-14.el6, python27-runtime 1.1-25.el6, python27-scipy 0.12.1-3.el6, python27-python 2.7.8-16.el6, +12 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) python27 1.1-25.el6, python27-numpy 1.7.1-10.el6, python27-PyYAML 3.10-14.el6, python27-runtime 1.1-25.el6, python27-scipy 0.12.1-3.el6, python27-python 2.7.8-16.el6, +12 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) python27 1.1-25.el7, python27-numpy 1.7.1-10.el7, python27-PyYAML 3.10-14.el7, python27-runtime 1.1-25.el7, python27-scipy 0.12.1-4.el7, python27-python 2.7.8-14.el7, +11 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) python27 1.1-25.el7, python27-numpy 1.7.1-10.el7, python27-PyYAML 3.10-14.el7, python27-runtime 1.1-25.el7, python27-scipy 0.12.1-4.el7, python27-python 2.7.8-14.el7, +11 more
    +2 more products
    Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) python27 1.1-25.el6, python27-numpy 1.7.1-10.el6, python27-PyYAML 3.10-14.el6, python27-runtime 1.1-25.el6, python27-scipy 0.12.1-3.el6, python27-python 2.7.8-16.el6, +12 more Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) python27 1.1-25.el7, python27-numpy 1.7.1-10.el7, python27-PyYAML 3.10-14.el7, python27-runtime 1.1-25.el7, python27-scipy 0.12.1-4.el7, python27-python 2.7.8-14.el7, +11 more
    fixed: vendor fix RHSA-2016:1166
  • Red Hat Storage Console 2.1 rhsc 2.1.2-0.40.el6rhs, rhsc-lib 2.1.2-0.40.el6rhs, rhsc-setup 2.1.2-0.40.el6rhs, rhsc-tools 2.1.2-0.40.el6rhs, rhsc-backend 2.1.2-0.40.el6rhs, rhsc-restapi 2.1.2-0.40.el6rhs, +3 more Red Hat Storage Native Client for Red Hat Enterprise Linux 5 glusterfs 3.4.0.68rhs-1.el5, glusterfs-api 3.4.0.68rhs-1.el5, glusterfs-fuse 3.4.0.68rhs-1.el5, glusterfs-libs 3.4.0.68rhs-1.el5, glusterfs-rdma 3.4.0.68rhs-1.el5 Red Hat Storage Native Client for Red Hat Enterprise Linux 6 glusterfs 3.4.0.68rhs-1.el6, glusterfs-api 3.4.0.68rhs-1.el6, glusterfs-fuse 3.4.0.68rhs-1.el6, glusterfs-libs 3.4.0.68rhs-1.el6, glusterfs-rdma 3.4.0.68rhs-1.el6 Red Hat Storage Server 2.1 python-backports 1.0-3.el6, glusterfs 3.4.0.68rhs-1.el6rhs, glusterfs-api 3.4.0.68rhs-1.el6rhs, glusterfs-fuse 3.4.0.68rhs-1.el6rhs, glusterfs-libs 3.4.0.68rhs-1.el6rhs, glusterfs-rdma 3.4.0.68rhs-1.el6rhs, +4 more
    fixed: vendor fix RHSA-2014:1263
show 1 more
  • Red Hat Enterprise Linux 5 python Red Hat Enterprise Linux 6 bzr, python, tkinter, python-libs, python-test, python-tools Red Hat Enterprise Linux 7 python, tkinter, python-libs, python-test, python-tools, python-tornado Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) python-backports-ssl_match_hostname Red Hat Enterprise MRG 2 pymongo, python-bson Red Hat Satellite 6 python-requests, python3-requests
    +2 more products
    Red Hat Software Collections python33-python, python33-python-libs, python33-python-test, python33-python-tools, python33-python-tkinter, rh-python34-python-bson, +2 more Red Hat Subscription Asset Manager pymongo
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

4.86% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P

Classification

Weakness
  • CWE-399 Resource Management Errors

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.