CVE ID:	CVE-2013-2099
Description:	Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2013.0252   1.3.6.1.4.1.25623.1.0.112996   1.3.6.1.4.1.25623.1.0.120059   1.3.6.1.4.1.25623.1.0.891107
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2099 55107 http://secunia.com/advisories/55107 55116 http://secunia.com/advisories/55116 RHSA-2014:1690 http://rhn.redhat.com/errata/RHSA-2014-1690.html RHSA-2016:1166 https://access.redhat.com/errata/RHSA-2016:1166 USN-1983-1 http://www.ubuntu.com/usn/USN-1983-1 USN-1984-1 http://www.ubuntu.com/usn/USN-1984-1 USN-1985-1 http://www.ubuntu.com/usn/USN-1985-1 [oss-security] 20130515 Re: CVE Request (minor) -- Python 3.2: DoS when matching certificate with many '*' wildcard characters {was: CVE Request (minor) -- python-backports-ssl_match_hostname: Denial of service when matching certificate with many '*' wildcard characters } http://www.openwall.com/lists/oss-security/2013/05/16/6 http://bugs.python.org/issue17980 http://bugs.python.org/issue17980 https://bugzilla.redhat.com/show_bug.cgi?id=963260 https://bugzilla.redhat.com/show_bug.cgi?id=963260