CVE-2013-7440

The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow…

published June 7, 2016

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01876 · 79.2th percentile
Published
2016-06-07T18:00Z
EPSS history
Timeline
  • 07 JUN 18:00Z
    The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow…
    cvelistv5