Medium severity5.5NVD Advisory· Published Dec 5, 2025· Updated Jun 17, 2026
CVE-2025-6966
CVE-2025-6966
Description
NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
43- Canonical/python-aptv5Range: 3.0
cpe:2.3:a:ubuntu:python-apt:*:*:*:*:*:*:*:*+ 39 more
- cpe:2.3:a:ubuntu:python-apt:*:*:*:*:*:*:*:*range: <0.9.3.11
- cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu2:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:0.9.3.11:-:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:0.9.3.11:build1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1build1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.10:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.11:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.2:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.3:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.4:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.5:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.7:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.8:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.9:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta2ubuntu1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta4ubuntu1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta5:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.1.0:beta5ubuntu1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:1.6.6:-:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.0.1:-:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.4.0:\+22.10:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.4.0:-:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.4.0:ubuntu1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.4.0:ubuntu2:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.4.0:ubuntu3:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.4.0:ubuntu4:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.7.7:-:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.7.7:build1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.7.7:ubuntu1:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.7.7:ubuntu2:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.7.7:ubuntu3:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.7.7:ubuntu4:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:2.7.7:ubuntu5:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:3.0.0:-:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:python-apt:3.0.0:ubuntu1:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- bugs.launchpad.net/ubuntu/+source/python-apt/+bug/2091865nvdExploitIssue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2025/12/msg00019.htmlnvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.