Vendor/product archive

canonical / software-properties CVEs

Beta · best-effort

2 CVEs tagged to canonical / software-properties — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to canonical vendor archive

CVE-2012-0955

Published Dec 2, 2020

software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2011-4407

Published May 14, 2014

ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) attackers…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1