Skip to content
OpenAdvisories

Package · Debian

software-properties

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.8
    CVE-2012-0955

    software-properties incorrectly validated TLS certificates

    software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a vali…

    Canonical software-properties software-properties Debian
  • Unscored —
    CVE-2020-15709

    add-apt-repository print ASNI terminal codes

    Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archive) description to the terminal as-is, which allowed PPA owners to provide ANSI terminal escapes to modify terminal co…

    Canonical add-apt-repository software-properties software-properties Debian Ubuntu
  • Unscored —
    CVE-2011-4407

    ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fi…

    software-properties Debian
  • Unscored —
    CVE-2013-1061

    dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 befo…

    software-properties Debian