CVE-2025-6966

Published: Dec 5, 2025Modified: Jun 17, 2026

6.9

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: security@ubuntu.com (Secondary)

Description

NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.

Affected (44)

Products: Ubuntu: Python Apt · Debian: Debian Linux

1 product

1 product

Configuration A

43 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ubuntu Python Apt	Before 0.9.3.11
Ubuntu Python Apt	From 1.6.0 to 1.6.6
Ubuntu Python Apt	From 2.0.0 to 2.0.1
Ubuntu Python Apt	From 2.7.0 to 2.7.7
Ubuntu Python Apt	Version 0.9.3.11
Ubuntu Python Apt	Version 0.9.3.11 build1
Ubuntu Python Apt	Version 0.9.3.5 ubuntu1
Ubuntu Python Apt	Version 0.9.3.5 ubuntu2
Ubuntu Python Apt	Version 1.1.0 beta1
Ubuntu Python Apt	Version 1.1.0 beta1build1
Ubuntu Python Apt	Version 1.1.0 beta1ubuntu0.16.04.10
Ubuntu Python Apt	Version 1.1.0 beta1ubuntu0.16.04.11
Ubuntu Python Apt	Version 1.1.0 beta1ubuntu0.16.04.1
Ubuntu Python Apt	Version 1.1.0 beta1ubuntu0.16.04.2
Ubuntu Python Apt	Version 1.1.0 beta1ubuntu0.16.04.3
Ubuntu Python Apt	Version 1.1.0 beta1ubuntu0.16.04.4
Ubuntu Python Apt	Version 1.1.0 beta1ubuntu0.16.04.5
Ubuntu Python Apt	Version 1.1.0 beta1ubuntu0.16.04.7
Ubuntu Python Apt	Version 1.1.0 beta1ubuntu0.16.04.8
Ubuntu Python Apt	Version 1.1.0 beta1ubuntu0.16.04.9
Ubuntu Python Apt	Version 1.1.0 beta2ubuntu1
Ubuntu Python Apt	Version 1.1.0 beta3
Ubuntu Python Apt	Version 1.1.0 beta4
Ubuntu Python Apt	Version 1.1.0 beta4ubuntu1
Ubuntu Python Apt	Version 1.1.0 beta5
Ubuntu Python Apt	Version 1.1.0 beta5ubuntu1
Ubuntu Python Apt	Version 1.6.6
Ubuntu Python Apt	Version 2.0.1
Ubuntu Python Apt	Version 2.4.0
Ubuntu Python Apt	Version 2.4.0 +22.10
Ubuntu Python Apt	Version 2.4.0 ubuntu1
Ubuntu Python Apt	Version 2.4.0 ubuntu2
Ubuntu Python Apt	Version 2.4.0 ubuntu3
Ubuntu Python Apt	Version 2.4.0 ubuntu4
Ubuntu Python Apt	Version 2.7.7
Ubuntu Python Apt	Version 2.7.7 build1
Ubuntu Python Apt	Version 2.7.7 ubuntu1
Ubuntu Python Apt	Version 2.7.7 ubuntu2
Ubuntu Python Apt	Version 2.7.7 ubuntu3
Ubuntu Python Apt	Version 2.7.7 ubuntu4
Ubuntu Python Apt	Version 2.7.7 ubuntu5
Ubuntu Python Apt	Version 3.0.0
Ubuntu Python Apt	Version 3.0.0 ubuntu1

Running on/with	Platform Versions
Canonical Ubuntu Linux	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 11.0

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://bugs.launchpad.net/ubuntu/+source/python-apt/+bug/2091865

Source: security@ubuntu.com

ExploitIssue TrackingThird Party Advisory

https://lists.debian.org/debian-lts-announce/2025/12/msg00019.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.