CVE-2025-6966

Null-pointer dereference in python-apt TagSection.keys()

CVSS 6.9 MEDIUMEPSS 0.1%CWE-476

NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Canonical · python-apt

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bugs.launchpad.net/ubuntu/+source/python-apt/+bug/2091865 https://lists.debian.org/debian-lts-announce/2025/12/msg00019.html