How to fix EUVD-2025-18496?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Is Ubuntu affected by EUVD-2025-18496?

CVE-2025-6069 presents moderate security risk rated CVSS 4.3. Exploitation could compromise the security of affected deployments. Organizations should apply vendor updates when available and monitor for exploitation.

EUVD-2025-18496

| CVE-2025-6069 MEDIUM

2025-06-17 [email protected]

4.3

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Patch Released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 14, 2026 - 22:15 vuln.today

EUVD ID Assigned

Mar 14, 2026 - 22:15 euvd

EUVD-2025-18496

CVE Published

Jun 17, 2025 - 14:15 nvd

MEDIUM 4.3

Description

The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service.

Analysis

CVE-2025-6069 is a security vulnerability (CVSS 4.3). Remediation should follow standard vulnerability management procedures.

Technical Context

Vulnerability type not specified by vendor.

Affected Products

['Unspecified product']

Remediation

Monitor vendor channels for patch availability.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.3

CVSS: +22

POC: 0

Vendor Status

Ubuntu

Priority: Medium

jython

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-
noble	needs-triage	-
upstream	needs-triage	-
oracular	ignored	end of life, was needs-triage
questing	needs-triage	-
plucky	ignored	end of life, was needs-triage

python2.7

Release	Status	Version
noble	DNE	-
oracular	DNE	-
plucky	DNE	-
upstream	needs-triage	-
bionic	needed	-
focal	needed	-
jammy	needed	-
trusty	needed	-
xenial	needed	-
questing	DNE	-

python3.11

Release	Status	Version
noble	DNE	-
oracular	DNE	-
plucky	DNE	-
upstream	needs-triage	-
trusty	DNE	-
xenial	DNE	-
bionic	DNE	-
focal	DNE	-
jammy	released	3.11.0~rc1-1~22.04.1~esm5
questing	DNE	-

python3.12

Release	Status	Version
jammy	DNE	-
plucky	DNE	-
upstream	needs-triage	-
oracular	ignored	end of life, was needed
trusty	DNE	-
xenial	DNE	-
bionic	DNE	-
focal	DNE	-
noble	released	3.12.3-1ubuntu0.8
questing	DNE	-

python3.13

Release	Status	Version
jammy	DNE	-
noble	DNE	-
oracular	ignored	end of life, was needed
trusty	DNE	-
xenial	DNE	-
bionic	DNE	-
focal	DNE	-
plucky	released	3.13.3-1ubuntu0.3
upstream	released	3.13.6-1
questing	released	3.13.6-1

python3.9

Release	Status	Version
jammy	DNE	-
noble	DNE	-
oracular	DNE	-
plucky	DNE	-
upstream	needs-triage	-
trusty	DNE	-
xenial	DNE	-
bionic	DNE	-
focal	released	3.9.5-3ubuntu0~20.04.1+esm6
questing	DNE	-

python3.4

Release	Status	Version
xenial	DNE	-
bionic	DNE	-
focal	DNE	-
jammy	DNE	-
noble	DNE	-
oracular	DNE	-
plucky	DNE	-
upstream	needs-triage	-
trusty	released	3.4.3-1ubuntu1~14.04.7+esm16
questing	DNE	-

python3.5

Release	Status	Version
bionic	DNE	-
focal	DNE	-
jammy	DNE	-
noble	DNE	-
oracular	DNE	-
plucky	DNE	-
upstream	needs-triage	-
xenial	released	3.5.2-2ubuntu0~16.04.13+esm19
trusty	released	3.5.2-2ubuntu0~16.04.4~14.04.1+esm7
questing	DNE	-

python3.6

Release	Status	Version
trusty	DNE	-
xenial	DNE	-
focal	DNE	-
jammy	DNE	-
noble	DNE	-
oracular	DNE	-
plucky	DNE	-
upstream	needs-triage	-
bionic	released	3.6.9-1~18.04ubuntu1.13+esm6
questing	DNE	-

python3.7

Release	Status	Version
trusty	DNE	-
xenial	DNE	-
focal	DNE	-
jammy	DNE	-
noble	DNE	-
oracular	DNE	-
plucky	DNE	-
upstream	needs-triage	-
bionic	released	3.7.5-2ubuntu1~18.04.2+esm7
questing	DNE	-

python3.8

Release	Status	Version
trusty	DNE	-
xenial	DNE	-
jammy	DNE	-
noble	DNE	-
oracular	DNE	-
plucky	DNE	-
upstream	needs-triage	-
bionic	released	3.8.0-3ubuntu1~18.04.2+esm6
focal	released	3.8.10-0ubuntu1~20.04.18+esm2
questing	DNE	-

python3.10

Release	Status	Version
trusty	DNE	-
xenial	DNE	-
bionic	DNE	-
focal	DNE	-
noble	DNE	-
oracular	DNE	-
plucky	DNE	-
upstream	needs-triage	-
jammy	released	3.10.12-1~22.04.11
questing	DNE	-

python3.14

Release	Status	Version
trusty	DNE	-
xenial	DNE	-
bionic	DNE	-
focal	DNE	-
jammy	DNE	-
noble	DNE	-
oracular	DNE	-
plucky	DNE	-
upstream	released	3.14.0b3
questing	not-affected	3.14.0~b3-1

USN-7710-1

Debian

Bug #1109376

jython

Release	Status	Fixed Version	Urgency
bullseye	fixed	(unfixed)	end-of-life
forky, sid, bookworm, trixie	vulnerable	2.7.3+repack1-1	-
(unstable)	fixed	(unfixed)	-

pypy3

Release	Status	Fixed Version	Urgency
bullseye	fixed	7.3.5+dfsg-2+deb11u5	-
bullseye (security)	fixed	7.3.5+dfsg-2+deb11u5	-
bookworm	vulnerable	7.3.11+dfsg-2+deb12u3	-
trixie	vulnerable	7.3.19+dfsg-2	-
forky, sid	vulnerable	7.3.20+dfsg-4	-
(unstable)	fixed	(unfixed)	-

python2.7

Release	Status	Fixed Version	Urgency
bullseye	fixed	(unfixed)	end-of-life
(unstable)	fixed	(unfixed)	-

python3.11

Release	Status	Fixed Version	Urgency
bookworm	vulnerable	3.11.2-6+deb12u6	-
bookworm (security)	vulnerable	3.11.2-6+deb12u3	-
(unstable)	fixed	(unfixed)	-

python3.13

Release	Status	Fixed Version	Urgency
trixie	vulnerable	3.13.5-2	-
forky, sid	fixed	3.13.12-1	-
(unstable)	fixed	3.13.6-1	-

python3.9

Release	Status	Fixed Version	Urgency
bullseye	fixed	3.9.2-1+deb11u4	-
bullseye (security)	fixed	3.9.2-1+deb11u5	-
(unstable)	fixed	(unfixed)	-

python3.12

Release	Status	Fixed Version	Urgency
(unstable)	fixed	(unfixed)	-

DLA-4354-1 DLA-4445-1

EUVD-2025-18496 vulnerability details – vuln.today

Back

EUVD-2025-18496

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Vendor Status

Ubuntu

Debian

Share

EUVD-2025-18496

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Vendor Status

Ubuntu

Debian

Share

External POC / Exploit Code