Unrated severityNVD Advisory· Published Dec 2, 2020· Updated Sep 16, 2024

software-properties incorrectly validated TLS certificates

CVE-2012-0955

Description

software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bundle was provided. Fixed in software-properties version 0.92.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Canonical/Software Propertiesllm-fuzzy2 versions
<0.92+ 1 more
- (no CPE)range: <0.92
- (no CPE)range: 0.92

Patches

Vulnerability mechanics

References

code.launchpad.net/~cyphermox/software-properties/lp1036839/+merge/119753mitrevendor-advisoryx_refsource_UBUNTU
launchpad.net/bugs/1036839mitrevendor-advisoryx_refsource_UBUNTU

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000