AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-2100

HIGH · CVSS 9.3 EPSS 1.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-09-29 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. See the original NVD description below for full technical details.

CVE
CVE-2013-2100
Severity
HIGH
CVSS
9.3
EPSS
1.56%

Original NVD Description

The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate.