CVEvulnerability

CVE-2012-5356

5.8 MEDIUM Published 2012-10-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-10-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
Weaknesses
CWE-20

Description

The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before 0.81.13.5, 0.82.x before 0.82.7.3, and 0.92.x before 0.92.8 does not properly check PPA GPG keys imported from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack.

Affected configurations

• canonical ubuntu software properties 0.75.4 • canonical ubuntu software properties 0.75.5 • canonical ubuntu software properties 0.75.6 • canonical ubuntu software properties 0.75.7 • canonical ubuntu software properties 0.75.8 • canonical ubuntu software properties 0.75.9 • canonical ubuntu software properties 0.75.10 • canonical ubuntu software properties 0.75.10.1 • canonical ubuntu software properties 0.75.10.2 • canonical ubuntu software properties 0.80 • canonical ubuntu software properties 0.80.2 • canonical ubuntu software properties 0.80.3 • canonical ubuntu software properties 0.80.4 • canonical ubuntu software properties 0.80.5 • canonical ubuntu software properties 0.80.6 • canonical ubuntu software properties 0.80.7 • canonical ubuntu software properties 0.80.8 • canonical ubuntu software properties 0.80.9 • canonical ubuntu software properties 0.80.9.1 • canonical ubuntu software properties 0.81 • canonical ubuntu software properties 0.81.1 • canonical ubuntu software properties 0.81.2 • canonical ubuntu software properties 0.81.3 • canonical ubuntu software properties 0.81.4 • canonical ubuntu software properties 0.81.5 • canonical ubuntu software properties 0.81.6 • canonical ubuntu software properties 0.81.7 • canonical ubuntu software properties 0.81.8 • canonical ubuntu software properties 0.81.9 • canonical ubuntu software properties 0.81.10 • canonical ubuntu software properties 0.81.11 • canonical ubuntu software properties 0.81.13 • canonical ubuntu software properties 0.81.13.1 • canonical ubuntu software properties 0.81.13.2 • canonical ubuntu software properties 0.81.13.3 • canonical ubuntu software properties 0.81.13.4 • canonical ubuntu software properties 0.82 • canonical ubuntu software properties 0.82.2 • canonical ubuntu software properties 0.82.3 • canonical ubuntu software properties 0.82.4 • canonical ubuntu software properties 0.82.5 • canonical ubuntu software properties 0.82.6 • canonical ubuntu software properties 0.82.7 • canonical ubuntu software properties 0.82.7.1 • canonical ubuntu software properties 0.82.7.2 • canonical ubuntu software properties 0.92 • canonical ubuntu software properties 0.92.2 • canonical ubuntu software properties 0.92.3 • canonical ubuntu software properties 0.92.4 • canonical ubuntu software properties 0.92.5 • canonical ubuntu software properties 0.92.6 • canonical ubuntu software properties 0.92.7

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References