Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-12627

Fixed in a distro release EPSS 8%

In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions.

Published 2018-03-01 · CVE record · OSV

Products: Apache Software Foundation Apache Xerces C++

Distro releases

ReleasePackageFixed in
Arch Linuxxerces-c3.2.1-1
Debian 12xerces-c3.2.1+debian-1
Debian 13xerces-c3.2.1+debian-1
Debian 14xerces-c3.2.1+debian-1
Debian 7xerces-c3.1.1-3+deb7u5
SUSE Enterprise Storage 5xerces-c3.1.1-13.3.6
SUSE Linux Enterprise Module for Basesystem 15xerces-c3.1.4-3.3.25
SUSE Linux Enterprise Server 12 SP2-BCLxerces-c3.1.1-13.3.6
SUSE Linux Enterprise Server 12 SP2-LTSSxerces-c3.1.1-13.3.6
SUSE Linux Enterprise Server 12 SP3-BCLxerces-c3.1.1-13.3.6
SUSE Linux Enterprise Server 12 SP3-LTSSxerces-c3.1.1-13.3.6
SUSE Linux Enterprise Server 12 SP4-LTSSxerces-c3.1.1-13.3.6
SUSE Linux Enterprise Server 12 SP5xerces-c3.1.1-13.3.6
SUSE Linux Enterprise Server for SAP Applications 12 SP2xerces-c3.1.1-13.3.6
SUSE Linux Enterprise Server for SAP Applications 12 SP3xerces-c3.1.1-13.3.6
SUSE Linux Enterprise Server for SAP Applications 12 SP4xerces-c3.1.1-13.3.6
SUSE Linux Enterprise Server for SAP Applications 12 SP5xerces-c3.1.1-13.3.6
SUSE Linux Enterprise Software Development Kit 11 SP4Xerces-c2.8.0-29.17.5.1
SUSE Linux Enterprise Software Development Kit 12 SP5xerces-c3.1.1-13.3.6
SUSE OpenStack Cloud 7xerces-c3.1.1-13.3.6
SUSE OpenStack Cloud 8xerces-c3.1.1-13.3.6
SUSE OpenStack Cloud 9xerces-c3.1.1-13.3.6
SUSE OpenStack Cloud Crowbar 9xerces-c3.1.1-13.3.6
Ubuntu 14.04 LTSxerces-c3.1.1-5.1+deb8u4build0.14.04.1
Ubuntu Pro 16.04 LTSxerces-c3.1.3+debian-1ubuntu0.1~esm1
Ubuntu Pro 18.04 LTSxerces-c3.2.0+debian-2ubuntu0.1~esm1
openSUSE Leap 15.0xerces-c3.1.4-lp150.2.3.1
openSUSE Tumbleweedxerces-c3.2.3-1.9