Medium · published December 5, 2025
NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.
| Product | Versions | Fixed in |
|---|---|---|
| ubuntu/python-apt | < 0.9.3.11 | 0.9.3.11 |
| ubuntu/python-apt | ≥ 1.6.0, < 1.6.6 | 1.6.6 |
| ubuntu/python-apt | ≥ 2.0.0, < 2.0.1 | 2.0.1 |
| ubuntu/python-apt | ≥ 2.7.0, < 2.7.7 | 2.7.7 |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| ubuntu/python-apt | all versions | — |
| debian/debian_linux | all versions | — |