CVE-2013-2099

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...

4.3 MediumFix available

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.

Exploit likelihood

4.86%Up 2.7 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2013-2099
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2013-2099
Updated: 2026-11-02

EUVDEUVD-2013-2072 No score

Record: EUVD-2013-2072
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cqcg-qrcv-vr6v No score

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...

Record: GHSA-cqcg-qrcv-vr6v
Updated: 2026-11-02

OSV No score

Record: CVE-2013-2099
Updated: 2026-11-02

OSVDEBIAN-CVE-2013-2099 No score

Record: DEBIAN-CVE-2013-2099
Updated: 2026-11-02

OSVMGASA-2013-0252 No score

Updated python3, bzr and some python packages fix security vulnerabilties

Updated python3 packages fix security vulnerabilities:

A denial of service flaw was found in the way SSL module implementation of Python 3 performed matching of the certificate's name in the case it contained many '' wildcard characters. A remote attacker, able to obtain valid certificate with its name containing a lot of '' wildcard characters could use this flaw to cause denial of service (excessive CPU consumption) by issuing request to validate such a certificate for / to an application using the Python's ssl.match_hostname() functionality (CVE-2013-2099).

Ryan Sleevi of the Google Chrome Security Team has discovered that Python's SSL module doesn't handle NULL bytes inside subjectAltNames general names. This could lead to a breach when an application uses ssl.match_hostname() to match the hostname againt the certificate's subjectAltName's dNSName general names. (CVE-2013-4238).

Additionally, a linking issue when compiling C extensions for Python 3 has been fixed in Mageia 3 (mga#9395).

The CVE-2013-2099 issue also affects bzr, python-requests, python-tornado, python-pip, and python-virtualenv, and those have been updated as well.

Record: MGASA-2013-0252
Updated: 2026-11-02

OSVPSF-2013-1 No score

ssl.match_hostname() wildcard DoS

Record: PSF-2013-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2013-2099 No score

Record: UBUNTU-CVE-2013-2099
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bzr` Debian:12	before 2.6.0~bzr6574-1	2.6.0~bzr6574-1
`bzr` Debian:13	before 2.6.0~bzr6574-1	2.6.0~bzr6574-1
`linkchecker` Debian:12	before 8.5-1	8.5-1
`linkchecker` Debian:13	before 8.5-1	8.5-1
`linkchecker` Debian:14	before 8.5-1	8.5-1
`python-tornado` Debian:12	before 2.4.1-3	2.4.1-3
`python-tornado` Debian:13	before 2.4.1-3	2.4.1-3
`python-tornado` Debian:14	before 2.4.1-3	2.4.1-3
`python-urllib3` Debian:12	before 1.6-2	1.6-2
`python-urllib3` Debian:13	before 1.6-2	1.6-2

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`python-urllib3` Debian:14	before 1.6-2	1.6-2
`bzr` Debian:7	before 2.6.0~bzr6526-1+deb7u1, plus listed versions 2.6.0~bzr6526-1	2.6.0~bzr6526-1+deb7u1
`python3` Mageia:2	before 3.2.3-1.5.mga2	3.2.3-1.5.mga2
`python-tornado` Mageia:2	before 2.2.1-1.1.mga2	2.2.1-1.1.mga2
`bzr` Mageia:2	before 2.5.1-1.1.mga2	2.5.1-1.1.mga2
`python3` Mageia:3	before 3.3.0-4.3.mga3	3.3.0-4.3.mga3
`python-pip` Mageia:3	before 1.3.1-2.1.mga3	1.3.1-2.1.mga3
`python-tornado` Mageia:3	before 2.3-2.1.mga3	2.3-2.1.mga3
`bzr` Mageia:3	before 2.5.1-3.1.mga3	2.5.1-3.1.mga3
`python-requests` Mageia:3	before 0.13.5-2.1.mga3	0.13.5-2.1.mga3
`python-virtualenv` Mageia:3	before 1.9.1-1.2.mga3	1.9.1-1.2.mga3
`createrepo_c` Red Hat:satellite_capsule:6.1::el6	before 0:0.7.4-1.el6_6sat	0:0.7.4-1.el6_6sat
`createrepo_c-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:0.7.4-1.el6_6sat	0:0.7.4-1.el6_6sat
`createrepo_c-libs` Red Hat:satellite_capsule:6.1::el6	before 0:0.7.4-1.el6_6sat	0:0.7.4-1.el6_6sat
`facter` Red Hat:satellite_capsule:6.1::el6	before 1:2.4.6-3.el6sat	1:2.4.6-3.el6sat
`gperftools` Red Hat:satellite_capsule:6.1::el6	before 0:2.0-3.el6sat.2	0:2.0-3.el6sat.2
`gperftools-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:2.0-3.el6sat.2	0:2.0-3.el6sat.2
`gperftools-libs` Red Hat:satellite_capsule:6.1::el6	before 0:2.0-3.el6sat.2	0:2.0-3.el6sat.2
`hiera` Red Hat:satellite_capsule:6.1::el6	before 0:1.3.1-2.el6sat	0:1.3.1-2.el6sat
`libmongodb` Red Hat:satellite_capsule:6.1::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`livecd-tools` Red Hat:satellite_capsule:6.1::el6	before 1:13.4.1-2.el6sat	1:13.4.1-2.el6sat
`mod_passenger` Red Hat:satellite_capsule:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`mod_wsgi` Red Hat:satellite_capsule:6.1::el6	before 0:3.4-2.el6sat	0:3.4-2.el6sat
`mod_wsgi-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:3.4-2.el6sat	0:3.4-2.el6sat
`mod_xsendfile` Red Hat:satellite_capsule:6.1::el6	before 0:0.12-10.el6sat	0:0.12-10.el6sat
`mod_xsendfile-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:0.12-10.el6sat	0:0.12-10.el6sat
`mongodb` Red Hat:satellite_capsule:6.1::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-server` Red Hat:satellite_capsule:6.1::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`pyliblzma` Red Hat:satellite_capsule:6.1::el6	before 0:0.5.3-3.el6sat	0:0.5.3-3.el6sat
`pyliblzma-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:0.5.3-3.el6sat	0:0.5.3-3.el6sat
`pyparsing` Red Hat:satellite_capsule:6.1::el6	before 0:1.5.6-6.el6sat	0:1.5.6-6.el6sat
`python-amqp` Red Hat:satellite_capsule:6.1::el6	before 0:1.4.9-1.el6sat	0:1.4.9-1.el6sat
`python-anyjson` Red Hat:satellite_capsule:6.1::el6	before 0:0.3.3-4.el6sat	0:0.3.3-4.el6sat
`python-billiard` Red Hat:satellite_capsule:6.1::el6	before 1:3.3.0.17-2.el6sat	1:3.3.0.17-2.el6sat
`python-billiard-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 1:3.3.0.17-2.el6sat	1:3.3.0.17-2.el6sat
`python-blinker` Red Hat:satellite_capsule:6.1::el6	before 0:1.3-2.el6_6sat	0:1.3-2.el6_6sat
`python-bson` Red Hat:satellite_capsule:6.1::el6	before 0:3.2-1.el6sat	0:3.2-1.el6sat
`python-crane` Red Hat:satellite_capsule:6.1::el6	before 0:2.0.0.2-2.el6sat	0:2.0.0.2-2.el6sat
`python-django` Red Hat:satellite_capsule:6.1::el6	before 0:1.6.11-5.el6sat	0:1.6.11-5.el6sat
`python-django-bash-completion` Red Hat:satellite_capsule:6.1::el6	before 0:1.6.11-5.el6sat	0:1.6.11-5.el6sat
`python-flask` Red Hat:satellite_capsule:6.1::el6	before 1:0.10.1-4.el6_6sat	1:0.10.1-4.el6_6sat
`python-httplib2` Red Hat:satellite_capsule:6.1::el6	before 0:0.7.2-1.el6	0:0.7.2-1.el6
`python-imgcreate` Red Hat:satellite_capsule:6.1::el6	before 1:13.4.1-2.el6sat	1:13.4.1-2.el6sat
`python-importlib` Red Hat:satellite_capsule:6.1::el6	before 0:1.0.2-1.el6sat	0:1.0.2-1.el6sat
`python-isodate` Red Hat:satellite_capsule:6.1::el6	before 0:0.5.0-4.el6sat	0:0.5.0-4.el6sat
`python-itsdangerous` Red Hat:satellite_capsule:6.1::el6	before 0:0.23-1.el6_6sat	0:0.23-1.el6_6sat
`python-jinja2-26` Red Hat:satellite_capsule:6.1::el6	before 0:2.6-3.el6_6sat	0:2.6-3.el6_6sat
`python-kombu` Red Hat:satellite_capsule:6.1::el6	before 1:3.0.33-7.el6sat	1:3.0.33-7.el6sat
`python-mongoengine` Red Hat:satellite_capsule:6.1::el6	before 0:0.10.5-2.el6sat	0:0.10.5-2.el6sat
`python-oauth2` Red Hat:satellite_capsule:6.1::el6	before 0:1.5.211-8.el6_6sat	0:1.5.211-8.el6_6sat
`python-okaara` Red Hat:satellite_capsule:6.1::el6	before 0:1.0.32-1.el6sat	0:1.0.32-1.el6sat
`python-pymongo` Red Hat:satellite_capsule:6.1::el6	before 0:3.2-1.el6sat	0:3.2-1.el6sat
`python-pymongo-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:3.2-1.el6sat	0:3.2-1.el6sat
`python-pymongo-gridfs` Red Hat:satellite_capsule:6.1::el6	before 0:3.2-1.el6sat	0:3.2-1.el6sat
`python-requests-toolbelt` Red Hat:satellite_capsule:6.1::el6	before 0:0.6.0-1.el6sat	0:0.6.0-1.el6sat
`python-saslwrapper` Red Hat:satellite_capsule:6.1::el6	before 0:0.22-5.el6sat	0:0.22-5.el6sat
`python-semantic_version` Red Hat:satellite_capsule:6.1::el6	before 0:2.2.0-6.el6sat	0:2.2.0-6.el6sat
`python-werkzeug` Red Hat:satellite_capsule:6.1::el6	before 0:0.8.3-2.el6_6sat	0:0.8.3-2.el6_6sat
`ruby-augeas` Red Hat:satellite_capsule:6.1::el6	before 0:0.4.1-1.el6_4	0:0.4.1-1.el6_4
`ruby-augeas-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:0.4.1-1.el6_4	0:0.4.1-1.el6_4
`ruby-rgen` Red Hat:satellite_capsule:6.1::el6	before 0:0.6.5-2.el6sat	0:0.6.5-2.el6sat
`ruby-shadow` Red Hat:satellite_capsule:6.1::el6	before 0:1.4.1-13.el6_4	0:1.4.1-13.el6_4
`ruby-shadow-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:1.4.1-13.el6_4	0:1.4.1-13.el6_4
`rubygem-ansi` Red Hat:satellite_capsule:6.1::el6	before 0:1.4.3-3.el6sat	0:1.4.3-3.el6sat
`rubygem-awesome_print` Red Hat:satellite_capsule:6.1::el6	before 0:1.0.2-12.el6sat	0:1.0.2-12.el6sat
`rubygem-bundler` Red Hat:satellite_capsule:6.1::el6	before 0:1.0.15-5.el6sat	0:1.0.15-5.el6sat
`rubygem-bundler_ext` Red Hat:satellite_capsule:6.1::el6	before 0:0.3.0-7.el6sat	0:0.3.0-7.el6sat
`rubygem-clamp` Red Hat:satellite_capsule:6.1::el6	before 0:0.6.2-2.el6sat	0:0.6.2-2.el6sat
`rubygem-ffi` Red Hat:satellite_capsule:6.1::el6	before 0:1.4.0-3.el6sat	0:1.4.0-3.el6sat
`rubygem-ffi-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:1.4.0-3.el6sat	0:1.4.0-3.el6sat
`rubygem-gssapi` Red Hat:satellite_capsule:6.1::el6	before 0:1.1.2-4.el6sat	0:1.1.2-4.el6sat
`rubygem-hashie` Red Hat:satellite_capsule:6.1::el6	before 0:2.0.5-2.el6sat	0:2.0.5-2.el6sat
`rubygem-highline` Red Hat:satellite_capsule:6.1::el6	before 0:1.6.21-1.el6sat	0:1.6.21-1.el6sat
`rubygem-json` Red Hat:satellite_capsule:6.1::el6	before 0:1.4.6-2.el6	0:1.4.6-2.el6
`rubygem-json-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:1.4.6-2.el6	0:1.4.6-2.el6
`rubygem-little-plugger` Red Hat:satellite_capsule:6.1::el6	before 0:1.1.3-17.el6sat	0:1.1.3-17.el6sat
`rubygem-logging` Red Hat:satellite_capsule:6.1::el6	before 0:1.8.1-26.el6sat	0:1.8.1-26.el6sat
`rubygem-mime-types` Red Hat:satellite_capsule:6.1::el6	before 0:1.19-7.el6sat	0:1.19-7.el6sat
`rubygem-multi_json` Red Hat:satellite_capsule:6.1::el6	before 0:1.8.2-4.el6sat	0:1.8.2-4.el6sat
`rubygem-newt` Red Hat:satellite_capsule:6.1::el6	before 0:0.9.6-2.el6sat	0:0.9.6-2.el6sat
`rubygem-newt-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:0.9.6-2.el6sat	0:0.9.6-2.el6sat
`rubygem-oauth` Red Hat:satellite_capsule:6.1::el6	before 0:0.4.7-8.el6sat	0:0.4.7-8.el6sat
`rubygem-openscap` Red Hat:satellite_capsule:6.1::el6	before 0:0.4.3-3.el6sat	0:0.4.3-3.el6sat
`rubygem-passenger` Red Hat:satellite_capsule:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`rubygem-passenger-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`rubygem-passenger-native` Red Hat:satellite_capsule:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`rubygem-passenger-native-libs` Red Hat:satellite_capsule:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`rubygem-powerbar` Red Hat:satellite_capsule:6.1::el6	before 0:1.0.11-8.el6sat	0:1.0.11-8.el6sat
`rubygem-rack` Red Hat:satellite_capsule:6.1::el6	before 1:1.4.1-13.el6sat	1:1.4.1-13.el6sat
`rubygem-rack-protection` Red Hat:satellite_capsule:6.1::el6	before 0:1.5.0-7.el6sat	0:1.5.0-7.el6sat
`rubygem-rake` Red Hat:satellite_capsule:6.1::el6	before 0:0.9.2.2-41.el6sat	0:0.9.2.2-41.el6sat
`rubygem-rdoc` Red Hat:satellite_capsule:6.1::el6	before 0:3.12-27.el6sat	0:3.12-27.el6sat
`rubygem-rdoc-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:3.12-27.el6sat	0:3.12-27.el6sat
`rubygem-rest-client` Red Hat:satellite_capsule:6.1::el6	before 0:1.6.7-1.el6sat	0:1.6.7-1.el6sat
`rubygem-rkerberos` Red Hat:satellite_capsule:6.1::el6	before 0:0.1.2-3.el6sat	0:0.1.2-3.el6sat
`rubygem-rkerberos-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:0.1.2-3.el6sat	0:0.1.2-3.el6sat
`rubygem-thor` Red Hat:satellite_capsule:6.1::el6	before 0:0.14.6-5.el6sat	0:0.14.6-5.el6sat
`saslwrapper` Red Hat:satellite_capsule:6.1::el6	before 0:0.22-5.el6sat	0:0.22-5.el6sat
`saslwrapper-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 0:0.22-5.el6sat	0:0.22-5.el6sat
`tfm` Red Hat:satellite_capsule:6.1::el6	before 0:2.0-2.el6sat	0:2.0-2.el6sat
`tfm-rubygem-algebrick` Red Hat:satellite_capsule:6.1::el6	before 0:0.7.3-4.el6sat	0:0.7.3-4.el6sat
`tfm-rubygem-apipie-params` Red Hat:satellite_capsule:6.1::el6	before 0:0.0.5-2.el6sat	0:0.0.5-2.el6sat
`tfm-rubygem-bundler_ext` Red Hat:satellite_capsule:6.1::el6	before 0:0.3.0-8.el6sat	0:0.3.0-8.el6sat
`tfm-rubygem-concurrent-ruby` Red Hat:satellite_capsule:6.1::el6	before 1:1.0.0-2.el6sat	1:1.0.0-2.el6sat
`tfm-rubygem-concurrent-ruby-edge` Red Hat:satellite_capsule:6.1::el6	before 1:0.2.0-2.el6sat	1:0.2.0-2.el6sat
`tfm-rubygem-multi_json` Red Hat:satellite_capsule:6.1::el6	before 0:1.10.1-3.el6sat	0:1.10.1-3.el6sat
`tfm-rubygem-net-scp` Red Hat:satellite_capsule:6.1::el6	before 0:1.1.0-5.el6sat	0:1.1.0-5.el6sat
`tfm-rubygem-net-ssh` Red Hat:satellite_capsule:6.1::el6	before 0:2.9.2-3.el6sat	0:2.9.2-3.el6sat
`tfm-rubygem-netrc` Red Hat:satellite_capsule:6.1::el6	before 0:0.7.7-7.el6sat	0:0.7.7-7.el6sat
`tfm-rubygem-rest-client` Red Hat:satellite_capsule:6.1::el6	before 0:1.6.7-4.el6sat	0:1.6.7-4.el6sat
`tfm-rubygem-sequel` Red Hat:satellite_capsule:6.1::el6	before 0:4.20.0-6.el6sat	0:4.20.0-6.el6sat
`tfm-runtime` Red Hat:satellite_capsule:6.1::el6	before 0:2.0-2.el6sat	0:2.0-2.el6sat
`v8` Red Hat:satellite_capsule:6.1::el6	before 1:3.14.5.10-9.el6sat	1:3.14.5.10-9.el6sat
`v8-debuginfo` Red Hat:satellite_capsule:6.1::el6	before 1:3.14.5.10-9.el6sat	1:3.14.5.10-9.el6sat
`createrepo_c` Red Hat:satellite:6.1::el6	before 0:0.7.4-1.el6_6sat	0:0.7.4-1.el6_6sat
`createrepo_c-debuginfo` Red Hat:satellite:6.1::el6	before 0:0.7.4-1.el6_6sat	0:0.7.4-1.el6_6sat
`createrepo_c-libs` Red Hat:satellite:6.1::el6	before 0:0.7.4-1.el6_6sat	0:0.7.4-1.el6_6sat
`facter` Red Hat:satellite:6.1::el6	before 1:2.4.6-3.el6sat	1:2.4.6-3.el6sat
`gperftools` Red Hat:satellite:6.1::el6	before 0:2.0-3.el6sat.2	0:2.0-3.el6sat.2
`gperftools-debuginfo` Red Hat:satellite:6.1::el6	before 0:2.0-3.el6sat.2	0:2.0-3.el6sat.2
`gperftools-libs` Red Hat:satellite:6.1::el6	before 0:2.0-3.el6sat.2	0:2.0-3.el6sat.2
`hiera` Red Hat:satellite:6.1::el6	before 0:1.3.1-2.el6sat	0:1.3.1-2.el6sat
`ipxe` Red Hat:satellite:6.1::el6	before 0:20130517-7.1fm.gitc4bce43.el6sat	0:20130517-7.1fm.gitc4bce43.el6sat
`ipxe-bootimgs` Red Hat:satellite:6.1::el6	before 0:20130517-7.1fm.gitc4bce43.el6sat	0:20130517-7.1fm.gitc4bce43.el6sat
`libmongodb` Red Hat:satellite:6.1::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`liquibase` Red Hat:satellite:6.1::el6	before 0:3.1.0-5.el6_6sat	0:3.1.0-5.el6_6sat
`livecd-tools` Red Hat:satellite:6.1::el6	before 1:13.4.1-2.el6sat	1:13.4.1-2.el6sat
`mod_passenger` Red Hat:satellite:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`mod_wsgi` Red Hat:satellite:6.1::el6	before 0:3.4-2.el6sat	0:3.4-2.el6sat
`mod_wsgi-debuginfo` Red Hat:satellite:6.1::el6	before 0:3.4-2.el6sat	0:3.4-2.el6sat
`mod_xsendfile` Red Hat:satellite:6.1::el6	before 0:0.12-10.el6sat	0:0.12-10.el6sat
`mod_xsendfile-debuginfo` Red Hat:satellite:6.1::el6	before 0:0.12-10.el6sat	0:0.12-10.el6sat
`mongodb` Red Hat:satellite:6.1::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-debuginfo` Red Hat:satellite:6.1::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-server` Red Hat:satellite:6.1::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`pyliblzma` Red Hat:satellite:6.1::el6	before 0:0.5.3-3.el6sat	0:0.5.3-3.el6sat
`pyliblzma-debuginfo` Red Hat:satellite:6.1::el6	before 0:0.5.3-3.el6sat	0:0.5.3-3.el6sat
`pyparsing` Red Hat:satellite:6.1::el6	before 0:1.5.6-6.el6sat	0:1.5.6-6.el6sat
`python-amqp` Red Hat:satellite:6.1::el6	before 0:1.4.9-1.el6sat	0:1.4.9-1.el6sat
`python-anyjson` Red Hat:satellite:6.1::el6	before 0:0.3.3-4.el6sat	0:0.3.3-4.el6sat
`python-billiard` Red Hat:satellite:6.1::el6	before 1:3.3.0.17-2.el6sat	1:3.3.0.17-2.el6sat
`python-billiard-debuginfo` Red Hat:satellite:6.1::el6	before 1:3.3.0.17-2.el6sat	1:3.3.0.17-2.el6sat
`python-blinker` Red Hat:satellite:6.1::el6	before 0:1.3-2.el6_6sat	0:1.3-2.el6_6sat
`python-bson` Red Hat:satellite:6.1::el6	before 0:3.2-1.el6sat	0:3.2-1.el6sat
`python-crane` Red Hat:satellite:6.1::el6	before 0:2.0.0.2-2.el6sat	0:2.0.0.2-2.el6sat
`python-django` Red Hat:satellite:6.1::el6	before 0:1.6.11-5.el6sat	0:1.6.11-5.el6sat
`python-django-bash-completion` Red Hat:satellite:6.1::el6	before 0:1.6.11-5.el6sat	0:1.6.11-5.el6sat
`python-flask` Red Hat:satellite:6.1::el6	before 1:0.10.1-4.el6_6sat	1:0.10.1-4.el6_6sat
`python-httplib2` Red Hat:satellite:6.1::el6	before 0:0.7.2-1.el6	0:0.7.2-1.el6
`python-imgcreate` Red Hat:satellite:6.1::el6	before 1:13.4.1-2.el6sat	1:13.4.1-2.el6sat
`python-importlib` Red Hat:satellite:6.1::el6	before 0:1.0.2-1.el6sat	0:1.0.2-1.el6sat
`python-isodate` Red Hat:satellite:6.1::el6	before 0:0.5.0-4.el6sat	0:0.5.0-4.el6sat
`python-itsdangerous` Red Hat:satellite:6.1::el6	before 0:0.23-1.el6_6sat	0:0.23-1.el6_6sat
`python-jinja2-26` Red Hat:satellite:6.1::el6	before 0:2.6-3.el6_6sat	0:2.6-3.el6_6sat
`python-kombu` Red Hat:satellite:6.1::el6	before 1:3.0.33-7.el6sat	1:3.0.33-7.el6sat
`python-mongoengine` Red Hat:satellite:6.1::el6	before 0:0.10.5-2.el6sat	0:0.10.5-2.el6sat
`python-oauth2` Red Hat:satellite:6.1::el6	before 0:1.5.211-8.el6_6sat	0:1.5.211-8.el6_6sat
`python-okaara` Red Hat:satellite:6.1::el6	before 0:1.0.32-1.el6sat	0:1.0.32-1.el6sat
`python-pymongo` Red Hat:satellite:6.1::el6	before 0:3.2-1.el6sat	0:3.2-1.el6sat
`python-pymongo-debuginfo` Red Hat:satellite:6.1::el6	before 0:3.2-1.el6sat	0:3.2-1.el6sat
`python-pymongo-gridfs` Red Hat:satellite:6.1::el6	before 0:3.2-1.el6sat	0:3.2-1.el6sat
`python-requests-toolbelt` Red Hat:satellite:6.1::el6	before 0:0.6.0-1.el6sat	0:0.6.0-1.el6sat
`python-saslwrapper` Red Hat:satellite:6.1::el6	before 0:0.22-5.el6sat	0:0.22-5.el6sat
`python-semantic_version` Red Hat:satellite:6.1::el6	before 0:2.2.0-6.el6sat	0:2.2.0-6.el6sat
`python-werkzeug` Red Hat:satellite:6.1::el6	before 0:0.8.3-2.el6_6sat	0:0.8.3-2.el6_6sat
`ruby-augeas` Red Hat:satellite:6.1::el6	before 0:0.4.1-1.el6_4	0:0.4.1-1.el6_4
`ruby-augeas-debuginfo` Red Hat:satellite:6.1::el6	before 0:0.4.1-1.el6_4	0:0.4.1-1.el6_4
`ruby-rgen` Red Hat:satellite:6.1::el6	before 0:0.6.5-2.el6sat	0:0.6.5-2.el6sat
`ruby-shadow` Red Hat:satellite:6.1::el6	before 0:1.4.1-13.el6_4	0:1.4.1-13.el6_4
`ruby-shadow-debuginfo` Red Hat:satellite:6.1::el6	before 0:1.4.1-13.el6_4	0:1.4.1-13.el6_4
`rubygem-ansi` Red Hat:satellite:6.1::el6	before 0:1.4.3-3.el6sat	0:1.4.3-3.el6sat
`rubygem-awesome_print` Red Hat:satellite:6.1::el6	before 0:1.0.2-12.el6sat	0:1.0.2-12.el6sat
`rubygem-bundler` Red Hat:satellite:6.1::el6	before 0:1.0.15-5.el6sat	0:1.0.15-5.el6sat
`rubygem-bundler_ext` Red Hat:satellite:6.1::el6	before 0:0.3.0-7.el6sat	0:0.3.0-7.el6sat
`rubygem-clamp` Red Hat:satellite:6.1::el6	before 0:0.6.2-2.el6sat	0:0.6.2-2.el6sat
`rubygem-ffi` Red Hat:satellite:6.1::el6	before 0:1.4.0-3.el6sat	0:1.4.0-3.el6sat
`rubygem-ffi-debuginfo` Red Hat:satellite:6.1::el6	before 0:1.4.0-3.el6sat	0:1.4.0-3.el6sat
`rubygem-gssapi` Red Hat:satellite:6.1::el6	before 0:1.1.2-4.el6sat	0:1.1.2-4.el6sat
`rubygem-hashie` Red Hat:satellite:6.1::el6	before 0:2.0.5-2.el6sat	0:2.0.5-2.el6sat
`rubygem-highline` Red Hat:satellite:6.1::el6	before 0:1.6.21-1.el6sat	0:1.6.21-1.el6sat
`rubygem-json` Red Hat:satellite:6.1::el6	before 0:1.4.6-2.el6	0:1.4.6-2.el6
`rubygem-json-debuginfo` Red Hat:satellite:6.1::el6	before 0:1.4.6-2.el6	0:1.4.6-2.el6
`rubygem-little-plugger` Red Hat:satellite:6.1::el6	before 0:1.1.3-17.el6sat	0:1.1.3-17.el6sat
`rubygem-logging` Red Hat:satellite:6.1::el6	before 0:1.8.1-26.el6sat	0:1.8.1-26.el6sat
`rubygem-mime-types` Red Hat:satellite:6.1::el6	before 0:1.19-7.el6sat	0:1.19-7.el6sat
`rubygem-multi_json` Red Hat:satellite:6.1::el6	before 0:1.8.2-4.el6sat	0:1.8.2-4.el6sat
`rubygem-newt` Red Hat:satellite:6.1::el6	before 0:0.9.6-2.el6sat	0:0.9.6-2.el6sat
`rubygem-newt-debuginfo` Red Hat:satellite:6.1::el6	before 0:0.9.6-2.el6sat	0:0.9.6-2.el6sat
`rubygem-oauth` Red Hat:satellite:6.1::el6	before 0:0.4.7-8.el6sat	0:0.4.7-8.el6sat
`rubygem-openscap` Red Hat:satellite:6.1::el6	before 0:0.4.3-3.el6sat	0:0.4.3-3.el6sat
`rubygem-passenger` Red Hat:satellite:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`rubygem-passenger-debuginfo` Red Hat:satellite:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`rubygem-passenger-native` Red Hat:satellite:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`rubygem-passenger-native-libs` Red Hat:satellite:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`rubygem-powerbar` Red Hat:satellite:6.1::el6	before 0:1.0.11-8.el6sat	0:1.0.11-8.el6sat
`rubygem-rack` Red Hat:satellite:6.1::el6	before 1:1.4.1-13.el6sat	1:1.4.1-13.el6sat
`rubygem-rack-protection` Red Hat:satellite:6.1::el6	before 0:1.5.0-7.el6sat	0:1.5.0-7.el6sat
`rubygem-rake` Red Hat:satellite:6.1::el6	before 0:0.9.2.2-41.el6sat	0:0.9.2.2-41.el6sat
`rubygem-rdoc` Red Hat:satellite:6.1::el6	before 0:3.12-27.el6sat	0:3.12-27.el6sat
`rubygem-rdoc-debuginfo` Red Hat:satellite:6.1::el6	before 0:3.12-27.el6sat	0:3.12-27.el6sat
`rubygem-rest-client` Red Hat:satellite:6.1::el6	before 0:1.6.7-1.el6sat	0:1.6.7-1.el6sat
`rubygem-rkerberos` Red Hat:satellite:6.1::el6	before 0:0.1.2-3.el6sat	0:0.1.2-3.el6sat
`rubygem-rkerberos-debuginfo` Red Hat:satellite:6.1::el6	before 0:0.1.2-3.el6sat	0:0.1.2-3.el6sat
`rubygem-thor` Red Hat:satellite:6.1::el6	before 0:0.14.6-5.el6sat	0:0.14.6-5.el6sat
`saslwrapper` Red Hat:satellite:6.1::el6	before 0:0.22-5.el6sat	0:0.22-5.el6sat
`saslwrapper-debuginfo` Red Hat:satellite:6.1::el6	before 0:0.22-5.el6sat	0:0.22-5.el6sat
`tfm` Red Hat:satellite:6.1::el6	before 0:2.0-2.el6sat	0:2.0-2.el6sat
`tfm-rubygem-activerecord-session_store` Red Hat:satellite:6.1::el6	before 0:0.1.2-1.el6sat	0:0.1.2-1.el6sat
`tfm-rubygem-addressable` Red Hat:satellite:6.1::el6	before 0:2.3.6-3.el6sat	0:2.3.6-3.el6sat
`tfm-rubygem-algebrick` Red Hat:satellite:6.1::el6	before 0:0.7.3-4.el6sat	0:0.7.3-4.el6sat
`tfm-rubygem-ancestry` Red Hat:satellite:6.1::el6	before 0:2.0.0-4.el6sat	0:2.0.0-4.el6sat
`tfm-rubygem-anemone` Red Hat:satellite:6.1::el6	before 0:0.7.2-12.el6sat	0:0.7.2-12.el6sat
`tfm-rubygem-angular-rails-templates` Red Hat:satellite:6.1::el6	before 1:0.1.2-4.el6sat	1:0.1.2-4.el6sat
`tfm-rubygem-ansi` Red Hat:satellite:6.1::el6	before 0:1.4.3-6.el6sat	0:1.4.3-6.el6sat
`tfm-rubygem-apipie-bindings` Red Hat:satellite:6.1::el6	before 0:0.0.16-1.el6sat	0:0.0.16-1.el6sat
`tfm-rubygem-apipie-params` Red Hat:satellite:6.1::el6	before 0:0.0.5-2.el6sat	0:0.0.5-2.el6sat
`tfm-rubygem-apipie-rails` Red Hat:satellite:6.1::el6	before 0:0.3.6-1.el6sat	0:0.3.6-1.el6sat
`tfm-rubygem-audited` Red Hat:satellite:6.1::el6	before 0:4.2.0-1.el6sat	0:4.2.0-1.el6sat
`tfm-rubygem-audited-activerecord` Red Hat:satellite:6.1::el6	before 0:4.2.0-1.el6sat	0:4.2.0-1.el6sat
`tfm-rubygem-autoparse` Red Hat:satellite:6.1::el6	before 0:0.3.3-3.el6sat	0:0.3.3-3.el6sat
`tfm-rubygem-awesome_print` Red Hat:satellite:6.1::el6	before 0:1.0.2-13.el6sat	0:1.0.2-13.el6sat
`tfm-rubygem-bundler_ext` Red Hat:satellite:6.1::el6	before 0:0.3.0-8.el6sat	0:0.3.0-8.el6sat
`tfm-rubygem-clamp` Red Hat:satellite:6.1::el6	before 0:1.0.0-4.el6sat	0:1.0.0-4.el6sat
`tfm-rubygem-colorize` Red Hat:satellite:6.1::el6	before 0:0.7.7-3.el6sat	0:0.7.7-3.el6sat
`tfm-rubygem-concurrent-ruby` Red Hat:satellite:6.1::el6	before 1:1.0.0-2.el6sat	1:1.0.0-2.el6sat
`tfm-rubygem-concurrent-ruby-edge` Red Hat:satellite:6.1::el6	before 1:0.2.0-2.el6sat	1:0.2.0-2.el6sat
`tfm-rubygem-daemons` Red Hat:satellite:6.1::el6	before 0:1.2.3-3.el6sat	0:1.2.3-3.el6sat
`tfm-rubygem-deep_cloneable` Red Hat:satellite:6.1::el6	before 0:2.1.1-2.el6sat	0:2.1.1-2.el6sat
`tfm-rubygem-deface` Red Hat:satellite:6.1::el6	before 0:1.0.2-2.el6sat	0:1.0.2-2.el6sat
`tfm-rubygem-docker-api` Red Hat:satellite:6.1::el6	before 0:1.28.0-1.el6sat	0:1.28.0-1.el6sat
`tfm-rubygem-excon` Red Hat:satellite:6.1::el6	before 0:0.45.3-3.el6sat	0:0.45.3-3.el6sat
`tfm-rubygem-extlib` Red Hat:satellite:6.1::el6	before 0:0.9.16-3.el6sat	0:0.9.16-3.el6sat
`tfm-rubygem-facter` Red Hat:satellite:6.1::el6	before 0:2.4.0-3.el6sat	0:2.4.0-3.el6sat
`tfm-rubygem-facter-debuginfo` Red Hat:satellite:6.1::el6	before 0:2.4.0-3.el6sat	0:2.4.0-3.el6sat
`tfm-rubygem-faraday` Red Hat:satellite:6.1::el6	before 0:0.9.1-3.el6sat	0:0.9.1-3.el6sat
`tfm-rubygem-fast_gettext` Red Hat:satellite:6.1::el6	before 0:0.9.2-3.el6sat	0:0.9.2-3.el6sat
`tfm-rubygem-fog` Red Hat:satellite:6.1::el6	before 0:1.38.0-1.el6sat	0:1.38.0-1.el6sat
`tfm-rubygem-fog-aws` Red Hat:satellite:6.1::el6	before 0:0.7.4-3.el6sat	0:0.7.4-3.el6sat
`tfm-rubygem-fog-core` Red Hat:satellite:6.1::el6	before 0:1.36.0-1.el6sat	0:1.36.0-1.el6sat
`tfm-rubygem-fog-google` Red Hat:satellite:6.1::el6	before 0:0.1.0-2.el6sat	0:0.1.0-2.el6sat
`tfm-rubygem-fog-json` Red Hat:satellite:6.1::el6	before 0:1.0.2-3.el6sat	0:1.0.2-3.el6sat
`tfm-rubygem-fog-libvirt` Red Hat:satellite:6.1::el6	before 0:0.0.2-3.el6sat	0:0.0.2-3.el6sat
`tfm-rubygem-fog-openstack` Red Hat:satellite:6.1::el6	before 0:0.1.2-2.el6sat	0:0.1.2-2.el6sat
`tfm-rubygem-fog-rackspace` Red Hat:satellite:6.1::el6	before 0:0.1.1-2.el6sat	0:0.1.1-2.el6sat
`tfm-rubygem-fog-vsphere` Red Hat:satellite:6.1::el6	before 0:0.6.3-1.el6sat	0:0.6.3-1.el6sat
`tfm-rubygem-fog-xenserver` Red Hat:satellite:6.1::el6	before 0:0.2.2-2.el6sat	0:0.2.2-2.el6sat
`tfm-rubygem-fog-xml` Red Hat:satellite:6.1::el6	before 0:0.1.2-3.el6sat	0:0.1.2-3.el6sat
`tfm-rubygem-foreigner` Red Hat:satellite:6.1::el6	before 0:1.7.1-3.el6sat	0:1.7.1-3.el6sat
`tfm-rubygem-formatador` Red Hat:satellite:6.1::el6	before 0:0.2.1-9.el6sat	0:0.2.1-9.el6sat
`tfm-rubygem-friendly_id` Red Hat:satellite:6.1::el6	before 0:5.1.0-1.el6sat	0:5.1.0-1.el6sat
`tfm-rubygem-gettext_i18n_rails` Red Hat:satellite:6.1::el6	before 0:1.2.1-3.el6sat	0:1.2.1-3.el6sat
`tfm-rubygem-google-api-client` Red Hat:satellite:6.1::el6	before 0:0.8.2-3.el6sat	0:0.8.2-3.el6sat
`tfm-rubygem-hashie` Red Hat:satellite:6.1::el6	before 0:2.0.5-4.el6sat	0:2.0.5-4.el6sat
`tfm-rubygem-highline` Red Hat:satellite:6.1::el6	before 0:1.6.21-4.el6sat	0:1.6.21-4.el6sat
`tfm-rubygem-i18n` Red Hat:satellite:6.1::el6	before 0:0.7.0-2.el6sat	0:0.7.0-2.el6sat
`tfm-rubygem-ipaddress` Red Hat:satellite:6.1::el6	before 0:0.8.0-9.el6sat	0:0.8.0-9.el6sat
`tfm-rubygem-jquery-ui-rails` Red Hat:satellite:6.1::el6	before 0:4.1.2-3.el6sat	0:4.1.2-3.el6sat
`tfm-rubygem-jwt` Red Hat:satellite:6.1::el6	before 0:1.2.0-3.el6sat	0:1.2.0-3.el6sat
`tfm-rubygem-launchy` Red Hat:satellite:6.1::el6	before 0:2.4.3-3.el6sat	0:2.4.3-3.el6sat
`tfm-rubygem-little-plugger` Red Hat:satellite:6.1::el6	before 0:1.1.3-20.el6sat	0:1.1.3-20.el6sat
`tfm-rubygem-locale` Red Hat:satellite:6.1::el6	before 0:2.0.9-11.el6sat	0:2.0.9-11.el6sat
`tfm-rubygem-logging` Red Hat:satellite:6.1::el6	before 0:1.8.2-3.el6sat	0:1.8.2-3.el6sat
`tfm-rubygem-multi_json` Red Hat:satellite:6.1::el6	before 0:1.10.1-3.el6sat	0:1.10.1-3.el6sat
`tfm-rubygem-multipart-post` Red Hat:satellite:6.1::el6	before 0:1.2.0-4.el6sat	0:1.2.0-4.el6sat
`tfm-rubygem-net-ldap` Red Hat:satellite:6.1::el6	before 0:0.13.0-1.el6sat	0:0.13.0-1.el6sat
`tfm-rubygem-net-scp` Red Hat:satellite:6.1::el6	before 0:1.1.0-5.el6sat	0:1.1.0-5.el6sat
`tfm-rubygem-net-ssh` Red Hat:satellite:6.1::el6	before 0:2.9.2-3.el6sat	0:2.9.2-3.el6sat
`tfm-rubygem-netrc` Red Hat:satellite:6.1::el6	before 0:0.7.7-7.el6sat	0:0.7.7-7.el6sat
`tfm-rubygem-nokogiri` Red Hat:satellite:6.1::el6	before 0:1.6.6.2-2.el6sat	0:1.6.6.2-2.el6sat
`tfm-rubygem-nokogiri-debuginfo` Red Hat:satellite:6.1::el6	before 0:1.6.6.2-2.el6sat	0:1.6.6.2-2.el6sat
`tfm-rubygem-oauth` Red Hat:satellite:6.1::el6	before 0:0.4.7-8.el6sat	0:0.4.7-8.el6sat
`tfm-rubygem-parse-cron` Red Hat:satellite:6.1::el6	before 0:0.1.4-2.el6sat	0:0.1.4-2.el6sat
`tfm-rubygem-passenger` Red Hat:satellite:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`tfm-rubygem-passenger-native` Red Hat:satellite:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`tfm-rubygem-passenger-native-libs` Red Hat:satellite:6.1::el6	before 0:4.0.18-22.el6sat	0:4.0.18-22.el6sat
`tfm-rubygem-pg` Red Hat:satellite:6.1::el6	before 0:0.15.1-2.el6sat	0:0.15.1-2.el6sat
`tfm-rubygem-pg-debuginfo` Red Hat:satellite:6.1::el6	before 0:0.15.1-2.el6sat	0:0.15.1-2.el6sat
`tfm-rubygem-powerbar` Red Hat:satellite:6.1::el6	before 0:1.0.11-11.el6sat	0:1.0.11-11.el6sat
`tfm-rubygem-protected_attributes` Red Hat:satellite:6.1::el6	before 0:1.1.3-2.el6sat	0:1.1.3-2.el6sat
`tfm-rubygem-rabl` Red Hat:satellite:6.1::el6	before 0:0.11.6-3.el6sat	0:0.11.6-3.el6sat
`tfm-rubygem-rack-jsonp` Red Hat:satellite:6.1::el6	before 0:1.3.1-3.el6sat	0:1.3.1-3.el6sat
`tfm-rubygem-rails-i18n` Red Hat:satellite:6.1::el6	before 0:4.0.8-1.el6sat	0:4.0.8-1.el6sat
`tfm-rubygem-rails-observers` Red Hat:satellite:6.1::el6	before 0:0.1.2-6.el6sat	0:0.1.2-6.el6sat
`tfm-rubygem-rbovirt` Red Hat:satellite:6.1::el6	before 0:0.0.37-1.el6sat	0:0.0.37-1.el6sat
`tfm-rubygem-rbvmomi` Red Hat:satellite:6.1::el6	before 0:1.8.2-3.el6sat	0:1.8.2-3.el6sat
`tfm-rubygem-rest-client` Red Hat:satellite:6.1::el6	before 0:1.6.7-4.el6sat	0:1.6.7-4.el6sat
`tfm-rubygem-retriable` Red Hat:satellite:6.1::el6	before 0:1.4.1-3.el6sat	0:1.4.1-3.el6sat
`tfm-rubygem-robotex` Red Hat:satellite:6.1::el6	before 0:1.0.0-18.el6sat	0:1.0.0-18.el6sat
`w3af` Ubuntu:16.04:LTS	All versions, plus listed versions 1.1svn5547-1.1	None known

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-2099 is a medium vulnerability (CVSS 4.3) in Python, published May 16, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.86%, the 92nd percentile. Fixed in bzr 2.6.0~bzr6574-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 434 package rows and 151 references. The JSON record has them. Also not on the record: 6 package claims. ID and package lookups still check them.