1 matches found
python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns
A denial of service flaw was found in the way Python's SSL module implementation performed matching of certain certificate names. A remote attacker able to obtain a valid certificate that contained multiple wildcard characters could use this flaw to issue a request to validate such a certificate,...