TrustCor Root Certificates Vulnerability in Amazon Linux 2
CVE-2023-32803

Currently unrated

Key Information:

Vendor: Amazon
Status: Amazon Linux 2
Vendor: CVE Published:; 14 September 2026

What is CVE-2023-32803?

The ca-certificates package in Amazon Linux 2 prior to version 2021.2.50-72 fails to adequately remove specific TrustCor root certificates from its root store. This oversight arises from an incorrect remediation related to a previous vulnerability. The persistence of these certificates poses a risk, as they might facilitate unauthorized access or misalign security protocols within systems relying on the trust worthiness of the root store.

References

https://alas.aws.amazon.com/AL2/ALAS-2023-1957.html

https://explore.alas.aws.amazon.com/CVE-2023-32803.html

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 14, 2026
Vulnerability Reserved
May 15, 2023

CVE-2023-32803 Data

JSON