Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

software-properties vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2012-5356
The apt-add-repository tool in Ubuntu Software Properties 0.75.x prior to 0.75.10.3, 0.80.x prior to 0.80.9.2, 0.81.x prior to 0.81.13.5, 0.82.x prior to 0.82.7.3, and 0.92.x prior to 0.92.8 does not properly check PPA GPG keys imported from a keyserver, which allows remote malic...
Canonical Ubuntu Software Properties 0.75.10.1Canonical Ubuntu Software Properties 0.75.6Canonical Ubuntu Software Properties 0.75.5Canonical Ubuntu Software Properties 0.75.10Canonical Ubuntu Software Properties 0.75.9Canonical Ubuntu Software Properties 0.75.8Canonical Ubuntu Software Properties 0.75.7Canonical Ubuntu Software Properties 0.75.10.2Canonical Ubuntu Software Properties 0.75.4Canonical Ubuntu Software Properties 0.80.6Canonical Ubuntu Software Properties 0.80.5Canonical Ubuntu Software Properties 0.80.9.1Canonical Ubuntu Software Properties 0.80.9Canonical Ubuntu Software Properties 0.80.2Canonical Ubuntu Software Properties 0.80Canonical Ubuntu Software Properties 0.80.8Canonical Ubuntu Software Properties 0.80.7Canonical Ubuntu Software Properties 0.80.4Canonical Ubuntu Software Properties 0.80.3Canonical Ubuntu Software Properties 0.81.13.3Canonical Ubuntu Software Properties 0.81.13.2Canonical Ubuntu Software Properties 0.81.6
4.6
CVSSv2
CVE-2013-1061
dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 prior to 0.92.17.3, 0.92.9 prior to 0.92.9.3, and 0.82.7 prior to 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by lever...
Marc Deslauriers Software-properties 0.92.9Marc Deslauriers Software-properties 0.82.7.4Marc Deslauriers Software-properties 0.92.17.2Marc Deslauriers Software-properties 0.82.7.3Marc Deslauriers Software-properties 0.82.7.2Marc Deslauriers Software-properties 0.92.17.1Marc Deslauriers Software-properties 0.92.17Marc Deslauriers Software-properties 0.82.7.1Marc Deslauriers Software-properties 0.82.7Marc Deslauriers Software-properties 0.92.9.2Marc Deslauriers Software-properties 0.92.9.1Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 12.04
5.8
CVSSv2
CVE-2012-0955
software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bu...
Canonical Software-properties
NA
CVE-2023-3096
A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vulnerability affects the function changedSource. The manipulation leads to improper access controls. An attack has to be approached locally. The exploit has been d...
Kylinos Kylin-software-properties
NA
CVE-2023-3097
A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been rated as critical. This issue affects the function setMainSource. The manipulation leads to os command injection. Local access is required to approach this attack. The exploit has been disclo...
Kylinos Kylin-software-properties
4.3
CVSSv2
CVE-2011-4407
ppa.py in Software Properties prior to 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) malicious users to spoof GPG keys for a package repository.
Canonical Ubuntu Linux 11.04Canonical Software-propertiesCanonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.10
2.1
CVSSv2
CVE-2020-15709
Versions of add-apt-repository prior to 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archive) description to the terminal as-is, which allowed PPA owners to provide ANSI terminal escapes to modify terminal contents in unexpecte...
Canonical Add-apt-repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298CVE-2024-20356CVE-2023-21987CVE-2024-33217bypassCVE-2024-31804CVE-2024-32660unauthorizedSSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook