Alibaba Security Advisories · December 2022 — Alibaba Security Advisories
2 advisories 41 CVEs 2 EXPLOITED

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2022-12. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALINUX2-SA-2022:0057

ALINUX 2ExploitedCISA KEV listedHIGH2022-12-07

ALINUX2-SA-2022:0057: pki-core security update (Important)

CVEs:CVE-2022-2414

Affected products

ProductStatusVendorPackageEcosystem
pki-core affected Alibaba Cloud pki-core —
Upstream advisory

ALINUX2-SA-2023:0001

ALINUX 2ExploitedCISA KEV listedHIGH2022-12-29

ALINUX2-SA-2023:0001: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2021-33656CVE-2021-4037CVE-2021-4159CVE-2022-0001CVE-2022-0002CVE-2022-0494CVE-2022-1012CVE-2022-1048CVE-2022-1184CVE-2022-1198CVE-2022-1462CVE-2022-1679CVE-2022-1729CVE-2022-1734CVE-2022-21125CVE-2022-21166CVE-2022-2153CVE-2022-2318CVE-2022-24958CVE-2022-2503CVE-2022-25258CVE-2022-2586CVE-2022-2588CVE-2022-2602CVE-2022-26365CVE-2022-2639CVE-2022-26490CVE-2022-27223CVE-2022-28388CVE-2022-28389CVE-2022-28390CVE-2022-2978CVE-2022-30594CVE-2022-3176CVE-2022-3202CVE-2022-32250CVE-2022-3542CVE-2022-36879CVE-2022-36946CVE-2022-39188

Affected products

ProductStatusVendorPackageEcosystem
kernel affected Alibaba Cloud kernel —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.