CVE-2013-2099

CVE-2013-2099 describes an algorithmic complexity vulnerability in the ssl.match_hostname function across Python versions 3.2.x, 3.3.x, and older python-backports-ssl_match_hostname. This flaw allows a remote attacker to trigger a denial of service by providing a certificate with numerous wildcard characters in the common name, leading to excessive CPU consumption. The vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity and a partial impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.