Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m49h-wwcv-rf5m

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) attackers to spoof GPG keys for a package repository.

ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) attackers to spoof GPG keys for a package repository.

EPSS

Процентиль: 34%
0.00134
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
больше 11 лет назад

ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) attackers to spoof GPG keys for a package repository.

nvd
больше 11 лет назад

ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) attackers to spoof GPG keys for a package repository.

debian
больше 11 лет назад

ppa.py in Software Properties before 0.81.13.3 does not validate the s ...

EPSS

Процентиль: 34%
0.00134
Низкий

Дефекты

CWE-20