Design/Logic Flaw

2020-12-0201:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.2%

JSON

software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn’t check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bundle was provided. Fixed in software-properties version 0.92.

CPENameOperatorVersion
software-propertieslt0.92

CPE	Name	Operator	Version
	software-properties	lt	0.92

References

code.launchpad.net/~cyphermox/software-properties/lp1036839/+merge/119753

launchpad.net/bugs/1036839