What’s Vulnerable › Vulnerabilities

CVE-2012-1093

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-02-21 · updated 2026-06-16
• Weakness: CWE-59

Description

The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation.

Affected products

• Debian Linux: 8.0, 9.0, 10.0
• Debian x11-common: before 1\:7.6\+12 — fixed in 1\:7.6\+12

How to fix

Upgrade to a fixed version: Debian x11-common 1\:7.6\+12. Check the vendor advisory for mitigations.

References

• http://vladz.devzero.fr/012_x11-common-vuln.html
• http://www.openwall.com/lists/oss-security/2012/02/29/1
• http://www.openwall.com/lists/oss-security/2012/03/01/1
• https://access.redhat.com/security/cve/cve-2012-1093
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
• https://security-tracker.debian.org/tracker/CVE-2012-1093
• http://vladz.devzero.fr/012_x11-common-vuln.html
• http://www.openwall.com/lists/oss-security/2012/02/29/1
• http://www.openwall.com/lists/oss-security/2012/03/01/1
• https://access.redhat.com/security/cve/cve-2012-1093
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
• https://security-tracker.debian.org/tracker/CVE-2012-1093

Get alerted when CVE-2012-1093 or the next vulnerability affects your stack