CVE-2020-15709CWE-20

add-apt-repository print ASNI terminal codes

published September 5, 2020

CVSS
—
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archive) description to the terminal as-is, which allowed PPA owners to provide ANSI terminal escapes to modify terminal contents in unexpected ways.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00325 · 24.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-09-05T03:30Z
EPSS history
Timeline
  • 05 SEP 03:30Z
    add-apt-repository print ASNI terminal codes
    cvelistv5