127 matches found
CVE-2025-6966
NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...
CVE-2025-6966
CVE-2025-6966 is a vulnerability in Python-apt on APT-based Linux systems caused by a NULL pointer dereference in TagSection.keys() when processing deb822 files with malformed non-UTF-8 keys. It can lead to a local denial of service (process crash). The issue is reported across multiple distribut...
CVE-2025-6966 Null-pointer dereference in python-apt TagSection.keys()
NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...
CVE-2025-6966 Null-pointer dereference in python-apt TagSection.keys()
NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...
CVE-2025-6966
NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...
Python-apt security vulnerabilities
Python-apt is a Python Foundation Pypi codebase that supports the Apt package management tool. A security vulnerability exists in Python-apt, which stems from the presence of a null pointer dereference in the TagSection.keys function, which could lead to a denial of service by a local attacker vi...
CVE-2025-6966: NULL Pointer Dereference
NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...
UBUNTU-CVE-2025-6966
NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...
EUVD-2020-19863
Malware in sbrugna...
EUVD-2022-5210
Malicious code in bioql PyPI...
EUVD-2022-4782
Malicious code in bioql PyPI...
PT-2025-49242
Name of the Vulnerable Software and Affected Versions python-apt affected versions not specified Description A flaw exists in python-apt on APT-based Linux systems due to a NULL pointer dereference within the TagSection.keys function. A local attacker can exploit this by providing a specially...
Debian: Security Advisory (DLA-1511-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4247-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4668-4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
cfsshtunnel (>=0.1.7, <=0.2.1), click-reviewers-tools (>=0.70.0b0, <=0.86.0) +2 more potentially affected by CVE-2019-15795 via python-apt (0.7.8)
python-apt PYPI version 0.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on python-apt and may be impacted: - cfsshtunnel =0.1.7, =0.70.0b0, =0.86.0 - craft-parts 1.19.8 - plex-updater 0.1.0 Source cves: CVE-2019-15795 Source advisory:...
python-apt Does Not Check Hash Signature
Python-apt doesn't check if hashes are signed in Version.fetchbinary and Version.fetchsource of apt/package.py or in fetcharchives of apt/cache.py in version 1.9.3ubuntu2 and earlier. This allows downloads from unsigned repositories which shouldn't be allowed and has been fixed in verisions 1.9.5...
GHSA-PJ65-3PF6-C5Q4 python-apt Does Not Check Hash Signature
Python-apt doesn't check if hashes are signed in Version.fetchbinary and Version.fetchsource of apt/package.py or in fetcharchives of apt/cache.py in version 1.9.3ubuntu2 and earlier. This allows downloads from unsigned repositories which shouldn't be allowed and has been fixed in verisions 1.9.5...
cfsshtunnel (>=0.1.7, <=0.2.1), click-reviewers-tools (>=0.70.0b0, <=0.86.0) +2 more potentially affected by CVE-2019-15796 via python-apt (0.7.8)
python-apt PYPI version 0.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on python-apt and may be impacted: - cfsshtunnel =0.1.7, =0.70.0b0, =0.86.0 - craft-parts 1.19.8 - plex-updater 0.1.0 Source cves: CVE-2019-15796 Source advisory:...
GHSA-RP8M-H266-53JH python-apt Flawed Package Integrity Check
python-apt only checks the MD5 sums of downloaded files in Version.fetchbinary and Version.fetchsource of apt/package.py in version 1.9.0ubuntu1 and earlier. This allows a man-in-the-middle attack which could potentially be used to install altered packages and has been fixed in versions...