Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-12185

Fixed in a distro release EPSS 4%

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

Published 2018-01-24 · CVE record · OSV

Products: debian_linux, x.org x_server

Distro releases

ReleasePackageFixed in
Alpine 3.10xorg-server1.19.5-r0
Alpine 3.11xorg-server1.19.5-r0
Alpine 3.12xorg-server1.19.5-r0
Alpine 3.6xorg-server1.19.5-r0
Alpine 3.7xorg-server1.19.5-r0
Alpine 3.8xorg-server1.19.5-r0
Alpine 3.9xorg-server1.19.5-r0
Debian 12xorg-server2:1.19.5-1
Debian 13xorg-server2:1.19.5-1
Debian 14xorg-server2:1.19.5-1
Debian 7xorg-server2:1.12.4-6+deb7u8
Debian 8xorg-server2:1.16.4-1+deb8u2
Debian 9xorg-server2:1.19.2-1+deb9u2
SUSE Linux Enterprise Desktop 12 SP2xorg-x11-server7.6_1.18.3-76.15.2
SUSE Linux Enterprise Desktop 12 SP3xorg-x11-server7.6_1.18.3-76.15.2
SUSE Linux Enterprise Server 11 SP4xorg-x11-server7.4-27.122.16.1
SUSE Linux Enterprise Server 12 SP2xorg-x11-server7.6_1.18.3-76.15.2
SUSE Linux Enterprise Server 12 SP3xorg-x11-server7.6_1.18.3-76.15.2
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2xorg-x11-server7.6_1.18.3-76.15.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4xorg-x11-server7.4-27.122.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2xorg-x11-server7.6_1.18.3-76.15.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3xorg-x11-server7.6_1.18.3-76.15.2
SUSE Linux Enterprise Software Development Kit 11 SP4xorg-x11-server7.4-27.122.16.1
SUSE Linux Enterprise Software Development Kit 12 SP2xorg-x11-server7.6_1.18.3-76.15.2
SUSE Linux Enterprise Software Development Kit 12 SP3xorg-x11-server7.6_1.18.3-76.15.2
Ubuntu 14.04 LTSxorg-server2:1.15.1-0ubuntu2.11
Ubuntu 14.04 LTSxorg-server-lts-xenial2:1.18.3-1ubuntu2.3~trusty4
Ubuntu 16.04 LTSxorg-server2:1.18.4-0ubuntu0.7
Ubuntu 16.04 LTSxorg-server-hwe-16.042:1.19.3-1ubuntu1~16.04.4