medium5.5
CVE-2025-6966
NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via…
Impact
NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ubuntu | Python-Apt | before 0.9.3.11 from 1.6.0 before 1.6.6 from 2.0.0 before 2.0.1 from 2.7.0 before 2.7.7 Versions 0.9.3.5, 0.9.3.11 |
| Debian | Debian Linux | Version 11.0 |