CVE-2013-2099: Uncontrolled Resource Consumption

October 9, 2013 (updated June 8, 2016)

Algorithmic complexity vulnerability in the ssl.match_hostname function and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.

References

bugs.python.org/issue17980
bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2099

Code Behaviors & Features

Detect and mitigate CVE-2013-2099 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →