6.9
Moyenne
CVE-2025-6966 NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to…
Description
NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Python-apt 3.0 | 3.0 → < 3.0.0ubuntu1.1 | 3.0.0ubuntu1.1 |
| Python-apt 2.7 | 2.7 → < 2.7.7ubuntu5.1 | 2.7.7ubuntu5.1 |
| Python-apt 2.4 | 2.4 → < 2.4.0ubuntu4.1 | 2.4.0ubuntu4.1 |
| Python-apt 2.0 | 2.0 → < 2.0.1ubuntu0.20.04.1+esm1 | 2.0.1ubuntu0.20.04.1+esm1 |
| Python-apt 1.6 | 1.6 → dernières | Pas de correctif indiqué |
| Python-apt 1.1 | 1.1 → dernières | Pas de correctif indiqué |
| Python-apt 0.9 | premières → < 0.9.3.5ubuntu3+esm5 | 0.9.3.5ubuntu3+esm5 |
Références
- bugs.launchpad.net bugs.launchpad.net
Chronologie
- Publiée
- Dernière modification
Autres CVE de Python-apt
Les 4 CVE de Python-apt →
CVE-2020-27351
Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc,…
2.0
Faible
CVE-2019-15795
python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of…
4.7
Moyenne
CVE-2019-15796
Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py…
4.7
Moyenne