{"id":"CVE-2025-6966","details":"NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.","modified":"2026-04-10T05:35:22.887074Z","published":"2025-12-05T13:16:05.220Z","references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2025/12/msg00019.html"},{"type":"REPORT","url":"https://bugs.launchpad.net/ubuntu/+source/python-apt/+bug/2091865"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"0.9.3.11"}]},{"events":[{"introduced":"1.6.0"},{"fixed":"1.6.6"}]},{"events":[{"introduced":"2.0.0"},{"fixed":"2.0.1"}]},{"events":[{"introduced":"2.7.0"},{"fixed":"2.7.7"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.3.5-ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.3.5-ubuntu2"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.3.11-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.3.11-build1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1build1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1ubuntu0\\.16\\.04\\.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1ubuntu0\\.16\\.04\\.10"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1ubuntu0\\.16\\.04\\.11"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1ubuntu0\\.16\\.04\\.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1ubuntu0\\.16\\.04\\.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1ubuntu0\\.16\\.04\\.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1ubuntu0\\.16\\.04\\.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1ubuntu0\\.16\\.04\\.7"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1ubuntu0\\.16\\.04\\.8"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta1ubuntu0\\.16\\.04\\.9"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta2ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta4ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0-beta5ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.6.6-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.1-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"2.4.0-\\+22\\.10"}]},{"events":[{"introduced":"0"},{"last_affected":"2.4.0-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"2.4.0-ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.4.0-ubuntu2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.4.0-ubuntu3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.4.0-ubuntu4"}]},{"events":[{"introduced":"0"},{"last_affected":"2.7.7-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"2.7.7-build1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.7.7-ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.7.7-ubuntu2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.7.7-ubuntu3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.7.7-ubuntu4"}]},{"events":[{"introduced":"0"},{"last_affected":"2.7.7-ubuntu5"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.0-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.0-ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"11.0"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6966.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}