{"id":"CVE-2013-7440","aliases":["AZL-109599","DEBIAN-CVE-2013-7440","EUVD-2013-7204","GHSA-v6fx-m8cj-52v3","PSF-2016-1","RHEA-2014:1175","RHSA-2016:1166","SUSE-SU-2015:1298-1","SUSE-SU-2015:1651-1"],"status":"published","title":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does...","description":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01876,"percentile":0.79553,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-19"],"published":"2015-06-22T15:44:22Z","modified":"2026-10-27T05:36:16Z","fixes":[{"ecosystem":"Debian:11","package":"python2.7","fixed_in":["2.7.9-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"python-setuptools","fixed_in":["1.1.7-7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-setuptools","fixed_in":["1.1.7-7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"python-setuptools","fixed_in":["1.1.7-7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5","package":"python-setuptools","fixed_in":["1.1.7-7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 1.0","package":"python-setuptools","fixed_in":["1.1.7-7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"python-setuptools","fixed_in":["0.6c11-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"python-setuptools","fixed_in":["0.6c11-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"python-setuptools","fixed_in":["0.6c11-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"python-setuptools","fixed_in":["0.6c11-6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.11.0-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-1"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"libmongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"libmongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-30.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-30.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"v8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-9.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"v8-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-9.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"v8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-9.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"v8-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-9.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"v8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-11.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"v8-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-11.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"v8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-11.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"v8-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-11.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"python-httplib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.2-1.el6"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"python-httplib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.2-1.el6"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"python-httplib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-6.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"python-httplib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-6.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.30-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.30-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.30-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.30-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.4-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.4-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.4-2.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-2.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.4-2.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-2.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"rubygem-hammer_cli_foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-16.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"rubygem-hammer_cli_foreman_tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-3.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"rubygem-hammer_cli_foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-16.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"rubygem-hammer_cli_foreman_tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-4.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-4.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-5.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-5.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-25.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10-14.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-PyYAML-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10-14.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1-10.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-numpy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1-10.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1-10.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-2.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.0-2.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-pymongo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-pymongo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-pymongo-gridfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-virtualenv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.1.0-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-25.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-scipy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-25.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-25.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10-14.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-PyYAML-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10-14.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1-10.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-numpy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1-10.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1-10.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-14.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-14.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-14.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-14.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-14.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.0-2.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-pymongo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-pymongo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-pymongo-gridfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-14.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-14.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-virtualenv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.1.0-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-25.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-4.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-scipy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-4.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-25.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-14.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5","package":"python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 1.0","package":"python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6c11-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6c11-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6c11-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6c11-6.1"}]}]}],"products":[{"vendor":"python","product":"python"}],"references":[{"url":"http://seclists.org/oss-sec/2015/q2/483","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1166","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1224999","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://hg.python.org/cpython/rev/10d0edadbcdd","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugs.python.org/issue17997","tags":["x_refsource_CONFIRM","x_transferred","web","report"]},{"url":"http://www.securityfocus.com/bid/74707","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://seclists.org/oss-sec/2015/q2/523","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7440","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-v6fx-m8cj-52v3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-7440","tags":["advisory"]},{"url":"https://tools.ietf.org/html/rfc6125","tags":["web"]},{"url":"https://access.redhat.com/errata/RHEA-2014:1175","tags":["advisory"]},{"url":"https://access.redhat.com/site/documentation/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1131602","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhea-2014_1175.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1049748","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6619","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6619","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=963568","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2101","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=968166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=991116","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2882","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2882","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=989755","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4180","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=990374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4182","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=991318","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4201","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=997639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4225","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1013076","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4386","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1039888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1039889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1059070","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7440","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7440","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1105369","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0007","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1071741","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0089","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0089","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0090","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072738","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0091","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076335","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0135","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1092354","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0192","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0208","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1099419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0241","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1704","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1108745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3531","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112285","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4616","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/articles/2039753","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=963260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1173041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1266529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334447","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1166.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2099","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151298-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/930189","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7440","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151651-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-7440","description":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2016-06-07T18:00:00Z","modified":"2024-08-06T18:09:16.919Z","updated_at":"2026-11-02T14:34:59.222149Z"}],"euvd":[{"id":"EUVD-2013-7204","description":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2016-06-07T18:00:00Z","modified":"2024-08-06T18:09:16Z","updated_at":"2026-11-03T01:56:23.526026Z"}],"ghsa":[{"id":"GHSA-v6fx-m8cj-52v3","title":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does...","description":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2022-05-17T03:46:13Z","modified":"2023-01-27T05:09:10Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T14:43:21.634382Z"}],"nvd":[{"id":"CVE-2013-7440","description":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2016-06-07T18:59:00.12Z","modified":"2026-06-17T00:01:57.59Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-19"],"updated_at":"2026-11-02T14:02:51.408338Z"}],"osv":[{"id":"AZL-109599","title":"CVE-2013-7440 affecting package python-py 1.11.0-1","description":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2016-06-07T18:59:00Z","modified":"2026-10-27T05:36:16Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:02.044071Z"},{"id":"CVE-2013-7440","description":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2016-06-07T18:59:00Z","modified":"2026-04-10T03:43:29.119933Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2013-7440","description":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2016-06-07T18:59:00.12Z","modified":"2026-08-04T06:03:59.389468387Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"PSF-2016-1","title":"ssl.match_hostname() IDNA issue","description":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2016-06-07T18:00:00Z","modified":"2025-10-09T00:58:29.662037Z","updated_at":"2026-11-02T15:52:50.263679Z"},{"id":"RHEA-2014:1175","title":"Red Hat Enhancement Advisory: Release of Satellite 6.0","status":"published","published":"2024-09-15T21:58:55Z","modified":"2026-10-07T10:01:18Z","updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2016:1166","title":"Red Hat Security Advisory: python27 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T08:56:07Z","modified":"2026-10-07T10:01:19Z","updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"SUSE-SU-2015:1298-1","title":"Security update for python-setuptools","description":"the following issue was fixed by this update: \nNon-RFC6125-compliant host name matching was incorrect (CVE-2013-7440 bnc#930189)\n  ","status":"published","published":"2015-06-22T15:44:22Z","modified":"2026-02-04T03:07:10.388418Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1651-1","title":"Recommended update for python-setuptools","description":"python-setuptools was updated to fix one security issue.\n\nThe following vulnerability was fixed:\n\n* CVE-2013-7440: Non-RFC6125-compliant host name matching was incorrect (bsc#930189)\n","status":"published","published":"2015-07-29T16:15:37Z","modified":"2026-02-04T03:43:10.453999Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}