Alibaba Security Advisories · January 2023 — Alibaba Security Advisories
8 advisories 15 CVEs 1 EXPLOITED

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2023-01. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALINUX2-SA-2023:0003

ALINUX 2Weaponized exploitHIGH2023-01-30

ALINUX2-SA-2023:0003: libXpm security update (Important)

CVEs:CVE-2022-4883

Affected products

ProductStatusVendorPackageEcosystem
libXpm affected Alibaba Cloud libXpm —
Upstream advisory

ALINUX2-SA-2023:0009

ALINUX 2Coalition ESS < 30%HIGH2023-01-31

ALINUX2-SA-2023:0009: libksba security update (Important)

CVEs:CVE-2022-47629

Affected products

ProductStatusVendorPackageEcosystem
libksba affected Alibaba Cloud libksba —
Upstream advisory

ALINUX2-SA-2023:0005

ALINUX 2Coalition ESS < 30%HIGH2023-01-30

ALINUX2-SA-2023:0005: sssd security and bug fix update (Important)

CVEs:CVE-2022-4254

Affected products

ProductStatusVendorPackageEcosystem
sssd affected Alibaba Cloud sssd —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.