CVE-2013-7040

CVE-2013-7040 describes a denial-of-service vulnerability in Python 2.7 before 3.4, affecting products like Apple macOS and Python itself. The flaw stems from an incomplete fix for a previous vulnerability, where Python's hash value randomization uses only the last eight bits of a prefix, making it susceptible to predictable hash collisions. An unauthenticated attacker can exploit this with medium attack complexity by sending crafted input to an application using hash tables, leading to high CPU consumption and a denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this vulnerability.