Known vulnerabilities in Amazon Linux AMI
Vendor:
Amazon Web Services
Software:
Amazon Linux AMI
Software CPE:
cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website:
https://aws.amazon.com/
Total vulnerabilities:
3943
Public exploits:
290
Known exploited (KEV):
53
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
Vulnerabilities (3943)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU96937 - Memory corruption CVE-2023-46361 |
CWE-119 | Medium | - | 06.09.2024 | - | ||
| #VU88575 - Improper input validation CVE-2023-47100 |
CWE-20 | High | - | 16.04.2024 | - | ||
| #VU86547 - Improper input validation CVE-2024-25617 |
CWE-20 | Medium | - | 15.02.2024 | - | ||
| #VU84849 - Command injection CVE-2023-5752 |
CWE-77 | Medium | - | 28.12.2023 | - | ||
| #VU83930 - NULL Pointer Dereference CVE-2023-49083 |
CWE-476 | Medium | - | 06.12.2023 | - | ||
| #VU83628 - Unchecked Return Value CVE-2023-49286 |
CWE-252 | Medium | - | 03.12.2023 | - | ||
| #VU83508 - Off-by-one Error CVE-2023-47038 |
CWE-193 | High | - | 27.11.2023 | - | ||
| #VU83391 - Integer overflow CVE-2023-48232 |
CWE-190 | Low | - | 21.11.2023 | - | ||
| #VU83304 - Reachable Assertion CVE-2023-38473 |
CWE-617 | Low | - | 20.11.2023 | - | ||
| #VU83303 - Reachable Assertion CVE-2023-38472 |
CWE-617 | Low | - | 20.11.2023 | - | ||
| #VU83261 - Resource exhaustion CVE-2023-44271 |
CWE-400 | Medium | - | 18.11.2023 | - | ||
| #VU83212 - Heap-based Buffer Overflow CVE-2023-6175 |
CWE-122 | High | - | 16.11.2023 | - | ||
| #VU83211 - Resource exhaustion CVE-2023-6174 |
CWE-400 | Medium | - | 16.11.2023 | - | ||
| #VU83152 - Permissions, Privileges, and Access Controls CVE-2023-36049 |
CWE-264 | Medium | - | 15.11.2023 | - | ||
| #VU83142 - Security Features CVE-2023-36558 |
CWE-254 | Low | - | 15.11.2023 | - | ||
| #VU83025 - Memory corruption CVE-2023-46852 |
CWE-119 | High | - | 13.11.2023 | - | ||
| #VU83024 - Off-by-one Error CVE-2023-46853 |
CWE-193 | High | - | 13.11.2023 | - | ||
| #VU82907 - Improper input validation CVE-2023-46848 |
CWE-20 | Medium | - | 08.11.2023 | - | ||
| #VU81451 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-46316 |
CWE-78 | Medium | - | 04.10.2023 | - | ||
| #VU81322 - Exposure of sensitive information to an unauthorized actor CVE-2023-43804 |
CWE-200 | Low | - | 02.10.2023 | - |
Showing elements 1 - 20 out of 3943