Alibaba Security Advisories · March 2019 — Alibaba Security Advisories
7 advisories 9 CVEs

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2019-03. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALINUX2-SA-2019:0016

ALINUX 2EPSS <= 49%HIGH2019-03-27

ALINUX2-SA-2019:0016: openwsman security update (Important)

CVEs:CVE-2019-3816

Affected products

ProductStatusVendorPackageEcosystem
openwsman affected Alibaba Cloud openwsman
Upstream advisory

ALINUX2-SA-2019:0011

ALINUX 2EPSS <= 49%LOW2019-03-07

ALINUX2-SA-2019:0011: java-11-openjdk security update (Moderate)

CVEs:CVE-2019-2422

Affected products

ProductStatusVendorPackageEcosystem
java-11-openjdk affected Alibaba Cloud java-11-openjdk
Upstream advisory

ALINUX2-SA-2019:0012

ALINUX 2EPSS <= 49%LOW2019-03-07

ALINUX2-SA-2019:0012: java-1.7.0-openjdk security update (Moderate)

CVEs:CVE-2019-2422

Affected products

ProductStatusVendorPackageEcosystem
java-1.7.0-openjdk affected Alibaba Cloud java-1.7.0-openjdk
Upstream advisory

ALINUX2-SA-2019:0015

ALINUX 2EPSS <= 49%MEDIUM2019-03-27

ALINUX2-SA-2019:0015: cloud-init security update (Moderate)

CVEs:CVE-2019-0816

Affected products

ProductStatusVendorPackageEcosystem
cloud-init affected Alibaba Cloud cloud-init
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.