CVE catalog

CVE-2020-15709

software-properties affected and fixed versions

[CVE catalog]

Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archive) description to the terminal as-is, which allowed PPA owners to provide ANSI terminal escapes to modify terminal contents in unexpected ways.

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
0.33% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntuprosoftware-properties0.92.37.8ubuntu0.1~esm1Fixed[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntu20.04software-properties0.98.9.2Fixed[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.14Fixed[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.10Fixed[USN-4457-1][UBUNTU-CVE-2020-15709]

Showing 4 fix observations. All 70 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedsoftware-propertiesNot reportedUnknownSource applicability is not establishedProvider not reported
Debianbookwormsoftware-propertiesNot reportedAffectedDistribution reports no fix[CVE-2020-15709]
Debianbookwormsoftware-properties0.99.30-4.1~deb12u1Affected[CVE-2020-15709]
Debiansidsoftware-propertiesNot reportedAffectedDistribution reports no fix[CVE-2020-15709]
Debiansidsoftware-properties0.111-1Affected[CVE-2020-15709]
Ubuntu16.04software-properties0.96.13Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.15Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.16Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.17Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.18Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.1Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.10Fixed[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.2Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.3Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.4Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.5Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.6Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.7Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.8Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu16.04software-properties0.96.20.9Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.17Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.19Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.20Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.21Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.22Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.23Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.24Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.25Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.26Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.27Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.28Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.31Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.1Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.11Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.12Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.13Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.14Fixed[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.2Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.3Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.4Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.5Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.6Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.7Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.8Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu18.04software-properties0.96.24.32.9Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu20.04software-properties0.98.5Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu20.04software-properties0.98.6Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu20.04software-properties0.98.7Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu20.04software-properties0.98.9Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu20.04software-properties0.98.9.1Affected[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntu20.04software-properties0.98.9.2Fixed[USN-4457-1][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.27Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.28Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.29Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.30Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.31Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.32Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.34Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.35Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.36Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.37Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.37.1Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.37.2Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.37.3Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.37.5Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.37.6Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.37.7Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.37.8Affected[USN-4457-2][UBUNTU-CVE-2020-15709]
Ubuntuprosoftware-properties0.92.37.8ubuntu0.1~esm1Fixed[USN-4457-2][UBUNTU-CVE-2020-15709]
Original provider fields
{
  "package_releases": [
    {
      "name": "software-properties",
      "status": "vulnerable",
      "release": "sid",
      "version": "0.111-1"
    },
    {
      "name": "software-properties",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "0.99.30-4.1~deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 968850,
      "name": "software-properties",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": ""
    },
    {
      "bug": 968850,
      "name": "software-properties",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "software-properties",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    },
    {
      "name": "software-properties",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.96.20.10"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "0.96.13",
        "0.96.15",
        "0.96.16",
        "0.96.17",
        "0.96.18",
        "0.96.20",
        "0.96.20.1",
        "0.96.20.2",
        "0.96.20.3",
        "0.96.20.4",
        "0.96.20.5",
        "0.96.20.6",
        "0.96.20.7",
        "0.96.20.8",
        "0.96.20.9"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4457-1",
      "fixed_version": "0.96.20.10",
      "provider_source": "pypi",
      "provider_record_id": "USN-4457-1",
      "provider_updated_at": "2026-02-10T04:41:54Z"
    },
    {
      "name": "software-properties",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.96.24.32.14"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "0.96.24.17",
        "0.96.24.19",
        "0.96.24.20",
        "0.96.24.21",
        "0.96.24.22",
        "0.96.24.23",
        "0.96.24.24",
        "0.96.24.25",
        "0.96.24.26",
        "0.96.24.27",
        "0.96.24.28",
        "0.96.24.31",
        "0.96.24.32.1",
        "0.96.24.32.2",
        "0.96.24.32.3",
        "0.96.24.32.4",
        "0.96.24.32.5",
        "0.96.24.32.6",
        "0.96.24.32.7",
        "0.96.24.32.8",
        "0.96.24.32.9",
        "0.96.24.32.11",
        "0.96.24.32.12",
        "0.96.24.32.13"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4457-1",
      "fixed_version": "0.96.24.32.14",
      "provider_source": "pypi",
      "provider_record_id": "USN-4457-1",
      "provider_updated_at": "2026-02-10T04:41:54Z"
    },
    {
      "name": "software-properties",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.98.9.2"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "0.98.5",
        "0.98.6",
        "0.98.7",
        "0.98.9",
        "0.98.9.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4457-1",
      "fixed_version": "0.98.9.2",
      "provider_source": "pypi",
      "provider_record_id": "USN-4457-1",
      "provider_updated_at": "2026-02-10T04:41:54Z"
    },
    {
      "name": "software-properties",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.92.37.8ubuntu0.1~esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "0.92.27",
        "0.92.28",
        "0.92.29",
        "0.92.30",
        "0.92.31",
        "0.92.32",
        "0.92.34",
        "0.92.35",
        "0.92.36",
        "0.92.37",
        "0.92.37.1",
        "0.92.37.2",
        "0.92.37.3",
        "0.92.37.5",
        "0.92.37.6",
        "0.92.37.7",
        "0.92.37.8"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4457-2",
      "fixed_version": "0.92.37.8ubuntu0.1~esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-4457-2",
      "provider_updated_at": "2026-02-10T04:41:54Z"
    },
    {
      "name": "software-properties",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.92.37.8ubuntu0.1~esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "0.92.27",
        "0.92.28",
        "0.92.29",
        "0.92.30",
        "0.92.31",
        "0.92.32",
        "0.92.34",
        "0.92.35",
        "0.92.36",
        "0.92.37",
        "0.92.37.1",
        "0.92.37.2",
        "0.92.37.3",
        "0.92.37.5",
        "0.92.37.6",
        "0.92.37.7",
        "0.92.37.8"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-15709",
      "fixed_version": "0.92.37.8ubuntu0.1~esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-15709",
      "provider_updated_at": "2026-02-04T03:28:37.731812Z"
    },
    {
      "name": "software-properties",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.96.20.10"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "0.96.13",
        "0.96.15",
        "0.96.16",
        "0.96.17",
        "0.96.18",
        "0.96.20",
        "0.96.20.1",
        "0.96.20.2",
        "0.96.20.3",
        "0.96.20.4",
        "0.96.20.5",
        "0.96.20.6",
        "0.96.20.7",
        "0.96.20.8",
        "0.96.20.9"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-15709",
      "fixed_version": "0.96.20.10",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-15709",
      "provider_updated_at": "2026-02-04T03:28:37.731812Z"
    },
    {
      "name": "software-properties",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.96.24.32.14"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "0.96.24.17",
        "0.96.24.19",
        "0.96.24.20",
        "0.96.24.21",
        "0.96.24.22",
        "0.96.24.23",
        "0.96.24.24",
        "0.96.24.25",
        "0.96.24.26",
        "0.96.24.27",
        "0.96.24.28",
        "0.96.24.31",
        "0.96.24.32.1",
        "0.96.24.32.2",
        "0.96.24.32.3",
        "0.96.24.32.4",
        "0.96.24.32.5",
        "0.96.24.32.6",
        "0.96.24.32.7",
        "0.96.24.32.8",
        "0.96.24.32.9",
        "0.96.24.32.11",
        "0.96.24.32.12",
        "0.96.24.32.13"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-15709",
      "fixed_version": "0.96.24.32.14",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-15709",
      "provider_updated_at": "2026-02-04T03:28:37.731812Z"
    },
    {
      "name": "software-properties",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.98.9.2"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "0.98.5",
        "0.98.6",
        "0.98.7",
        "0.98.9",
        "0.98.9.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-15709",
      "fixed_version": "0.98.9.2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-15709",
      "provider_updated_at": "2026-02-04T03:28:37.731812Z"
    }
  ]
}

[Debian bug #968850]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [python3-software-properties]Unknown

    Source package: [software-properties]

    Details (2)

    • 0.99.30-4.1~deb12u1 · all · bookworm

      Affected

      dsa · software-properties · debian · bookworm; dsa · software-properties · debian · 12

    • 0.99.30-4.1~deb12u1 · all · bookworm

      Affected

      dsa · software-properties · debian · bookworm; dsa · software-properties · debian · 12

  • [software-properties-common]Unknown

    Source package: [software-properties]

    Details (2)

    • 0.99.30-4.1~deb12u1 · all · bookworm

      Affected

      dsa · software-properties · debian · bookworm; dsa · software-properties · debian · 12

    • 0.99.30-4.1~deb12u1 · all · bookworm

      Affected

      dsa · software-properties · debian · bookworm; dsa · software-properties · debian · 12

  • [software-properties-gtk]Unknown

    Source package: [software-properties]

    Details (2)

    • 0.99.30-4.1~deb12u1 · all · bookworm

      Affected

      dsa · software-properties · debian · bookworm; dsa · software-properties · debian · 12

    • 0.99.30-4.1~deb12u1 · all · bookworm

      Affected

      dsa · software-properties · debian · bookworm; dsa · software-properties · debian · 12

  • [software-properties-qt]Unknown

    Source package: [software-properties]

    Details (2)

    • 0.99.30-4.1~deb12u1 · all · bookworm

      Affected

      dsa · software-properties · debian · bookworm; dsa · software-properties · debian · 12

    • 0.99.30-4.1~deb12u1 · all · bookworm

      Affected

      dsa · software-properties · debian · bookworm; dsa · software-properties · debian · 12

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]