Canonical Software-properties — known CVE vulnerabilities

Every CVE whose affected-product data names Canonical Software-properties, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2012-0955 — CVSS 6.8 (medium): software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py…
• CVE-2011-4407 — CVSS 4.3 (medium): ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which…