CVE-2023-32803

HighCVSS 7.5/10Last modified Sep 22, 2026

Description

The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-669

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 14, 2026
Last modified
Sep 22, 2026
NVD status
Awaiting Analysis

Related CVEs from 2023

CVE-2023-328047.8Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU UserspaCVE-2023-328056.5In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with SyCVE-2023-328066.7In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege wCVE-2023-328074.4In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure wiCVE-2023-328084.4In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This couldCVE-2023-328094.4In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This couldCVE-2023-328104.4In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak withCVE-2023-328116.7In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalationCVE-2023-328126.7In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges CVE-2023-328134.4In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure wCVE-2023-328144.4In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure wiCVE-2023-328154.4In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure wi