CVE-2012-0955

7.4 highEPSS 0.6%

High (7.4) in canonical software-properties. EPSS 0.6% chance of exploitation in the next 30 days.

software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bundle was provided. Fixed in software-properties version 0.92.

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2020-12-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

canonical:software-properties

References

https://code.launchpad.net/~cyphermox/software-properties/lp1036839/+merge/119753
https://launchpad.net/bugs/1036839
https://code.launchpad.net/~cyphermox/software-properties/lp1036839/+merge/119753
https://launchpad.net/bugs/1036839

Check your stack JSON