CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-2099 — MEDIUM severity vulnerability | Release Alert
CVE-2013-2099
4.3
MEDIUMCVSS v2
Published
October 9, 2013
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.
ChocolateyPython is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance costs.
## Notes
- This package depends on the the latest major version of python package.
- This package do not support package parameters, please install the package [python315](https://chocolatey.org/packages/python315) directly when using package parameters.
- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**