Medium severity6.8NVD Advisory· Published Dec 2, 2020· Updated Jun 16, 2026
CVE-2012-0955
CVE-2012-0955
Description
software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bundle was provided. Fixed in software-properties version 0.92.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:canonical:software-properties:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:canonical:software-properties:*:*:*:*:*:*:*:*range: <0.92
- (no CPE)range: 0.92
- Range: >=0.92
Patches
Vulnerability mechanics
References
2- code.launchpad.net/~cyphermox/software-properties/lp1036839/+merge/119753nvdPatchVendor Advisory
- launchpad.net/bugs/1036839nvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.