Alibaba Security Advisories · July 2023 — Alibaba Security Advisories
2 advisories 34 CVEs 1 EXPLOITED

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2023-07. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALINUX2-SA-2023:0031

ALINUX 2ExploitedCISA KEV listedLOW2023-07-27

ALINUX2-SA-2023:0031: open-vm-tools security and bug fix update (Low)

CVEs:CVE-2023-20867

Affected products

ProductStatusVendorPackageEcosystem
open-vm-tools affected Alibaba Cloud open-vm-tools —
Upstream advisory

ALINUX2-SA-2023:0030

ALINUX 2Weaponized exploitHIGH2023-07-22

ALINUX2-SA-2023:0030: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2020-0404CVE-2022-1184CVE-2022-20423CVE-2022-33742CVE-2022-36280CVE-2022-3707CVE-2022-4095CVE-2022-41850CVE-2023-0045CVE-2023-0458CVE-2023-1073CVE-2023-1076CVE-2023-1077CVE-2023-1078CVE-2023-1670CVE-2023-1829CVE-2023-1855CVE-2023-1989CVE-2023-1990CVE-2023-2194CVE-2023-2269CVE-2023-23000CVE-2023-2513CVE-2023-26607CVE-2023-28328CVE-2023-2985CVE-2023-30772CVE-2023-3117CVE-2023-3220CVE-2023-3268CVE-2023-35001CVE-2023-35788CVE-2023-35825

Affected products

ProductStatusVendorPackageEcosystem
kernel affected Alibaba Cloud kernel —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.