Alibaba Security Advisories — December 2022 — Alibaba Security Advisories — Vulnetix

Try Vulnetix Request Demo

Alibaba Security Advisories · December 2022 — Alibaba Security Advisories

2 advisories 41 CVEs 1 EXPLOITED

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2022-12. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

Back to archive Open Console

Advisories

ALINUX2-SA-2023:0001

ALINUX 2Exploited2022-12-29

ALINUX2-SA-2023:0001: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2021-33656 CVE-2021-4037 CVE-2021-4159 CVE-2022-0001 CVE-2022-0002 CVE-2022-0494 CVE-2022-1012 CVE-2022-1048 CVE-2022-1184 CVE-2022-1198 CVE-2022-1462 CVE-2022-1679 CVE-2022-1729 CVE-2022-1734 CVE-2022-21125 CVE-2022-21166 CVE-2022-2153 CVE-2022-2318 CVE-2022-24958 CVE-2022-2503 CVE-2022-25258 CVE-2022-2586 CVE-2022-2588 CVE-2022-2602 CVE-2022-26365 CVE-2022-2639 CVE-2022-26490 CVE-2022-27223 CVE-2022-28388 CVE-2022-28389 CVE-2022-28390 CVE-2022-2978 CVE-2022-30594 CVE-2022-3176 CVE-2022-3202 CVE-2022-32250 CVE-2022-3542 CVE-2022-36879 CVE-2022-36946 CVE-2022-39188

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel	affected	Alibaba Cloud	kernel	—

Upstream advisory

ALINUX2-SA-2022:0057

ALINUX 22022-12-07

ALINUX2-SA-2022:0057: pki-core security update (Important)

CVEs:CVE-2022-2414

Affected products

Product	Status	Vendor	Package	Ecosystem
pki-core	affected	Alibaba Cloud	pki-core	—

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console