6.9
Medium
CVE-2025-6966 NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to…
Description
NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Python-apt 3.0 | 3.0 → < 3.0.0ubuntu1.1 | 3.0.0ubuntu1.1 |
| Python-apt 2.7 | 2.7 → < 2.7.7ubuntu5.1 | 2.7.7ubuntu5.1 |
| Python-apt 2.4 | 2.4 → < 2.4.0ubuntu4.1 | 2.4.0ubuntu4.1 |
| Python-apt 2.0 | 2.0 → < 2.0.1ubuntu0.20.04.1+esm1 | 2.0.1ubuntu0.20.04.1+esm1 |
| Python-apt 1.6 | 1.6 → latest | No fix stated |
| Python-apt 1.1 | 1.1 → latest | No fix stated |
| Python-apt 0.9 | earliest → < 0.9.3.5ubuntu3+esm5 | 0.9.3.5ubuntu3+esm5 |
References
- bugs.launchpad.net bugs.launchpad.net
Timeline
- Published
- Last modified
Other CVEs of Python-apt
The 4 CVEs of Python-apt →
CVE-2020-27351
Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc,…
2.0
Low
CVE-2019-15795
python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of…
4.7
Medium
CVE-2019-15796
Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py…
4.7
Medium