CVE-2012-0955

ALTO 7.4CVE-2012-0955 · Published 02/12/2020 · updated 16/06/2026

En resumen

CVE-2012-0955 es una vulnerabilidad ALTO (CVSS 7.4) que afecta a software-properties (canonical).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.61%, mayor que el 49.5% de las vulnerabilidades.
Solución: actualizar a 0.92 o posterior.

Package	Affected versions	Patched versions
software-properties canonical	`< 0.92`	`0.92`

Description

software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bundle was provided. Fixed in software-properties version 0.92.

References

code.launchpad.net/~cyphermox/software-properties/lp1036839/+merge/119753 · Patch
launchpad.net/bugs/1036839 · Exploit

Más vulnerabilidades de software-properties

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free