ALINUX2-SA-2021:0039
ALINUX 2Weaponized exploitHIGH2021-06-10
ALINUX2-SA-2021:0039: dhcp security update (Important)
CVEs:CVE-2021-25217
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dhcp | affected | Alibaba Cloud | dhcp | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALINUX2-SA-2021:0039: dhcp security update (Important)
CVEs:CVE-2021-25217
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dhcp | affected | Alibaba Cloud | dhcp | — |
ALINUX2-SA-2021:0031: glib2 security update (Important)
CVEs:CVE-2021-27219
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| glib2 | affected | Alibaba Cloud | glib2 | — |
ALINUX2-SA-2021:0041: postgresql security update (Important)
CVEs:CVE-2021-32027
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| postgresql | affected | Alibaba Cloud | postgresql | — |
ALINUX2-SA-2021:0034: hivex security update (Moderate)
CVEs:CVE-2021-3504
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| hivex | affected | Alibaba Cloud | hivex | — |
ALINUX2-SA-2021:0038: microcode_ctl security, bug fix and enhancement update (Important)
CVEs:CVE-2020-24489CVE-2020-24511CVE-2020-24512CVE-2020-24513
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| microcode_ctl | affected | Alibaba Cloud | microcode_ctl | — |
ALINUX2-SA-2021:0037: qt5-qtimageformats security update (Important)
CVEs:CVE-2018-25011CVE-2018-25014CVE-2020-36328CVE-2020-36329
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| qt5-qtimageformats | affected | Alibaba Cloud | qt5-qtimageformats | — |
ALINUX2-SA-2021:0032: libwebp security update (Important)
CVEs:CVE-2018-25011CVE-2020-36328CVE-2020-36329
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libwebp | affected | Alibaba Cloud | libwebp | — |
ALINUX2-SA-2021:0033: samba security and bug fix update (Moderate)
CVEs:CVE-2021-20254
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| samba | affected | Alibaba Cloud | samba | — |
ALINUX2-SA-2021:0036: 389-ds-base security and bug fix update (Moderate)
CVEs:CVE-2020-35518
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Alibaba Cloud | 389-ds-base | — |
ALINUX2-SA-2021:0040: gupnp security update (Important)
CVEs:CVE-2021-33516
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gupnp | affected | Alibaba Cloud | gupnp | — |
ALINUX2-SA-2021:0035: qemu-kvm security update (Moderate)
CVEs:CVE-2020-29443
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| qemu-kvm | affected | Alibaba Cloud | qemu-kvm | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.