Alibaba Security Advisories — November 2019 — Alibaba Security Advisories

Alibaba Security Advisories · November 2019 — Alibaba Security Advisories

2 advisories 10 CVEs 1 EXPLOITED

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2019-11. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

Back to archive Open Console

Advisories

ALINUX2-SA-2019:0121

ALINUX 22019-11-18

ALINUX2-SA-2019:0121: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2019-12378 CVE-2019-12380 CVE-2019-12381 CVE-2019-12455 CVE-2019-12456 CVE-2019-12614 CVE-2019-14821 CVE-2019-14835 CVE-2019-16714

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel	affected	Alibaba Cloud	kernel	—

Upstream advisory

ALINUX2-SA-2019:0120

ALINUX 2Exploited2019-11-02

ALINUX2-SA-2019:0120: php security update (Critical)

CVEs:CVE-2019-11043

Affected products

Product	Status	Vendor	Package	Ecosystem
php	affected	Alibaba Cloud	php	—

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console