6.9

CVE-2025-6966: canonical python-apt NULL Pointer Dereference

CVSS: 6.9v4.0MediumAnalyzed
AliasesUBUNTU-CVE-2025-6966USN-7916-2DEBIAN-CVE-2025-6966
Published 05-12-2025Last modified 15-12-2025
Open JSON

Vulnerability summary

CVE-2025-6966 is a medium (CVSS 6.9) NULL Pointer Dereference vulnerability in canonical python-apt. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.3% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
38/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.9/10
010
Medium · v4.0 (CVE.org)
EPSS score
0.14%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 0 · Related 1
USN-7916-1

Timeline

  1. 05-12-2025
    PublishedVulnerability first disclosed.
  2. 15-12-2025
    Last modifiedVulnerability information updated.

Description

NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.

CVSS metrics

6 scores · 4 sources · 2 versions

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

0.00 pp

From 0.14% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (bugs.launchpad.net)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Debian2 products
  • python-aptAll versions (No fix recorded) | < 3.1.0 | < 2.2.1.1
  • debian_linuxEOL11.0
Ubuntu2 products
  • python-apt< 0.9.3.5ubuntu3+esm5 | < 1.1.0~beta1ubuntu0.16.04.12+esm1 | < 1.6.6ubuntu0.1~esm1 | < 2.0.1ubuntu0.20.04.1+esm1 | < 2.4.0ubuntu4.1 | < 2.7.7ubuntu5.1 | < 3.0.0ubuntu1.1 | < 2.0.1ubuntu0.20.04.2esm2
  • python-apt< 0.9.3.11 | ≥ 1.6.0, < 1.6.6 | ≥ 2.0.0, < 2.0.1 | ≥ 2.7.0, < 2.7.7 | 0.9.3.5:ubuntu1 | 0.9.3.5:ubuntu2 | 0.9.3.11 | 0.9.3.11:build1 | 1.1.0:beta1 | 1.1.0:beta1build1 | 1.1.0:beta1ubuntu0.16.04.1 | 1.1.0:beta1ubuntu0.16.04.10 | 1.1.0:beta1ubuntu0.16.04.11 | 1.1.0:beta1ubuntu0.16.04.2 | 1.1.0:beta1ubuntu0.16.04.3 | 1.1.0:beta1ubuntu0.16.04.4 | 1.1.0:beta1ubuntu0.16.04.5 | 1.1.0:beta1ubuntu0.16.04.7 | 1.1.0:beta1ubuntu0.16.04.8 | 1.1.0:beta1ubuntu0.16.04.9 | 1.1.0:beta2ubuntu1 | 1.1.0:beta3 | 1.1.0:beta4 | 1.1.0:beta4ubuntu1 | 1.1.0:beta5 | 1.1.0:beta5ubuntu1 | 1.6.6 | 2.0.1 | 2.4.0:\+22.10 | 2.4.0 | 2.4.0:ubuntu1 | 2.4.0:ubuntu2 | 2.4.0:ubuntu3 | 2.4.0:ubuntu4 | 2.7.7 | 2.7.7:build1 | 2.7.7:ubuntu1 | 2.7.7:ubuntu2 | 2.7.7:ubuntu3 | 2.7.7:ubuntu4 | 2.7.7:ubuntu5 | 3.0.0 | 3.0.0:ubuntu1
Canonical1 product
  • python-apt≥ 3.0, < 3.0.0ubuntu1.1 | ≥ 3.0, < 3.0.0ubuntu0.25.04.1 | ≥ 2.7, < 2.7.7ubuntu5.1 | ≥ 2.4, < 2.4.0ubuntu4.1 | ≥ 2.0, < 2.0.1ubuntu0.20.04.1+esm1 | ≥ 1.6, < 1.6.6ubuntu0.1~esm1 | ≥ 1.1, < 1.1.0~beta1ubuntu0.16.04.12+esm1 | < 0.9.3.5ubuntu3+esm5

3 vendors · 5 products

References

8 links