Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-6966

Null-pointer dereference in python-apt TagSection.keys()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
canonical

Description

NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical python-apt

Default version status: unaffected

  • 3.0 to < 3.0.0ubuntu1.1affected
  • 3.0 to < 3.0.0ubuntu0.25.04.1affected
  • 2.7 to < 2.7.7ubuntu5.1affected
  • 2.4 to < 2.4.0ubuntu4.1affected
  • 2.0 to < 2.0.1ubuntu0.20.04.1+esm1affected
  • 1.6 to < 1.6.6ubuntu0.1~esm1affected
  • 1.1 to < 1.1.0~beta1ubuntu0.16.04.12+esm1affected
  • 0 to < 0.9.3.5ubuntu3+esm5affected

References