VulnSocial

CVE-2025-6966Patch(canonical / debian_linux)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch canonical debian_linux systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.

canonical CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • debian_linux
  • python-apt
  • ubuntu_linux

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
canonicaldebianubuntu
Products
debian_linuxpython-aptubuntu_linux

10 versions affected across 3 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-04: 1Patch / Workaround · 2026-03-04: 103-04
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Ferramentas Linux@Cezar_H_Linux
    Patch

    Just pushed a critical security analysis live regarding CVE-2025-6966. 🐧 If you manage #Fedora or #Debian 12 boxes, the update to apt 3.1.15 and #python-apt 3.1.0 is essential. Read more: 👉 https://tinyurl.com/yzmsjxt5 #Security https://t.co/zlkKSKA369

    Post summary

    The tweet announces a critical CVE‑2025‑6966 and urges users of Fedora or Debian 12 to apply the specified apt and python‑apt updates to mitigate the issue.

    0000088
    1.3K followersView on X
CPE platform detail42 entries

42 of 42 entries

PartVendorProductVersionTarget SWTarget HW
OScanonicalubuntu_linux---
OSdebiandebian_linux11.0--
Appubuntupython-apt---
Appubuntupython-apt0.9.3.11--
Appubuntupython-apt0.9.3.11--
Appubuntupython-apt0.9.3.5--
Appubuntupython-apt0.9.3.5--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.1.0--
Appubuntupython-apt1.6.6--
Appubuntupython-apt2.0.1--
Appubuntupython-apt2.4.0--
Appubuntupython-apt2.4.0--
Appubuntupython-apt2.4.0--
Appubuntupython-apt2.4.0--
Appubuntupython-apt2.4.0--
Appubuntupython-apt2.4.0--
Appubuntupython-apt2.7.7--
Appubuntupython-apt2.7.7--
Appubuntupython-apt2.7.7--
Appubuntupython-apt2.7.7--
Appubuntupython-apt2.7.7--
Appubuntupython-apt2.7.7--
Appubuntupython-apt2.7.7--
Appubuntupython-apt3.0.0--
Appubuntupython-apt3.0.0--

Explore more

Back to dashboardcanonical CVEsdebian CVEsubuntu CVEsdebian_linux vulnerabilities