Alibaba Security Advisories — July 2023 — Alibaba Security Advisories

Alibaba Security Advisories · July 2023 — Alibaba Security Advisories

2 advisories 34 CVEs 1 EXPLOITED

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2023-07. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

Back to archive Open Console

Advisories

ALINUX2-SA-2023:0031

ALINUX 2Exploited2023-07-27

ALINUX2-SA-2023:0031: open-vm-tools security and bug fix update (Low)

CVEs:CVE-2023-20867

Affected products

Product	Status	Vendor	Package	Ecosystem
open-vm-tools	affected	Alibaba Cloud	open-vm-tools	—

Upstream advisory

ALINUX2-SA-2023:0030

ALINUX 22023-07-22

ALINUX2-SA-2023:0030: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2020-0404 CVE-2022-1184 CVE-2022-20423 CVE-2022-33742 CVE-2022-36280 CVE-2022-3707 CVE-2022-4095 CVE-2022-41850 CVE-2023-0045 CVE-2023-0458 CVE-2023-1073 CVE-2023-1076 CVE-2023-1077 CVE-2023-1078 CVE-2023-1670 CVE-2023-1829 CVE-2023-1855 CVE-2023-1989 CVE-2023-1990 CVE-2023-2194 CVE-2023-2269 CVE-2023-23000 CVE-2023-2513 CVE-2023-26607 CVE-2023-28328 CVE-2023-2985 CVE-2023-30772 CVE-2023-3117 CVE-2023-3220 CVE-2023-3268 CVE-2023-35001 CVE-2023-35788 CVE-2023-35825

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel	affected	Alibaba Cloud	kernel	—

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console