Alibaba Security Advisories — May 2023 — Alibaba Security Advisories — Vulnetix

Try Vulnetix Request Demo

Alibaba Security Advisories · May 2023 — Alibaba Security Advisories

5 advisories 49 CVEs 2 EXPLOITED

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2023-05. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.

Back to archive Open Console

Advisories

ALINUX2-SA-2023:0025

ALINUX 2Exploited2023-05-25

ALINUX2-SA-2023:0025: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2023-32233

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel	affected	Alibaba Cloud	kernel	—

Upstream advisory

ALINUX2-SA-2023:0024

ALINUX 22023-05-24

ALINUX2-SA-2023:0024: git security update (Important)

CVEs:CVE-2023-25652 CVE-2023-29007

Affected products

Product	Status	Vendor	Package	Ecosystem
git	affected	Alibaba Cloud	git	—

Upstream advisory

ALINUX2-SA-2023:0023

ALINUX 22023-05-17

ALINUX2-SA-2023:0023: apr-util security update (Important)

CVEs:CVE-2022-25147

Affected products

Product	Status	Vendor	Package	Ecosystem
apr-util	affected	Alibaba Cloud	apr-util	—

Upstream advisory

ALINUX2-SA-2023:0022

ALINUX 22023-05-08

ALINUX2-SA-2023:0022: libwebp security update (Important)

CVEs:CVE-2023-1999

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Alibaba Cloud	libwebp	—

Upstream advisory

ALINUX2-SA-2023:0021

ALINUX 2Exploited2023-05-04

ALINUX2-SA-2023:0021: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2020-14331 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672 CVE-2021-3759 CVE-2021-3923 CVE-2022-1975 CVE-2022-20566 CVE-2022-2964 CVE-2022-3107 CVE-2022-3108 CVE-2022-3111 CVE-2022-3239 CVE-2022-33741 CVE-2022-3524 CVE-2022-3535 CVE-2022-3564 CVE-2022-3566 CVE-2022-41218 CVE-2022-4129 CVE-2022-41858 CVE-2022-42328 CVE-2022-42703 CVE-2022-42896 CVE-2022-45934 CVE-2022-4662 CVE-2022-47929 CVE-2023-0030 CVE-2023-0266 CVE-2023-0394 CVE-2023-0461 CVE-2023-0590 CVE-2023-0597 CVE-2023-1074 CVE-2023-1095 CVE-2023-1118 CVE-2023-1281 CVE-2023-1611 CVE-2023-1838 CVE-2023-23454 CVE-2023-23455 CVE-2023-23559 CVE-2023-26545 CVE-2023-28772

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel	affected	Alibaba Cloud	kernel	—

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console