Skip to content
OpenAdvisories
Medium ALAS2-2023-2275 2 CVEs

Moderate: mdadm security update (Amazon Linux 2)

Published Sep 27, 2023 · Updated Oct 5, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-28938: Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service via local access. CVE-2023-28736: Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 mdadm 0:4.0-5.amzn2.0.3
Amazon Linux · 2 mdadm-debuginfo 0:4.0-5.amzn2.0.3

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-28736.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-28938.html