Known vulnerabilities in Amazon Linux AMI - page 100

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68424 - Use After Free
CVE-2020-16119		 CWE-416 Low
No
No
 - 18.10.2022 SB2021011456
SB2022101867
SB2022102428
and 17 more
#VU64417 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41092		 CWE-200 Medium
No
No
 - 15.06.2022 SB2021100420
SB2022061528
SB2021101264
and 13 more
#VU64416 - Improper preservation of permissions
CVE-2021-41091		 CWE-281 Low
Available
No
 - 15.06.2022 SB2021100419
SB2022061528
SB2021101264
and 13 more
#VU64415 - Improper preservation of permissions
CVE-2021-41089		 CWE-281 Low
No
No
 - 15.06.2022 SB2021100419
SB2022061528
SB2021101264
and 14 more
#VU57389 - Resource exhaustion
CVE-2021-42340		 CWE-400 Medium
No
No
 - 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more
#VU57127 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-42013		 CWE-78 Critical
Available
Exploited
 - 07.10.2021 SB2021100718
SB2021100802
SB2021101513
and 8 more
#VU57063 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-41773		 CWE-22 Critical
Available
Exploited
 - 05.10.2021 SB2021100514
SB2021100601
SB2021100802
and 8 more
#VU57062 - NULL Pointer Dereference
CVE-2021-41524		 CWE-476 Medium
No
No
 - 05.10.2021 SB2021100514
SB2021100601
SB2021101513
and 5 more
#VU57038 - Incorrect Default Permissions
CVE-2021-41103		 CWE-276 Low
No
No
 - 04.10.2021 SB2021100406
SB2021100503
SB2021110812
and 21 more
#VU56967 - Improper input validation
CVE-2021-3672		 CWE-20 Medium
No
No
 - 30.09.2021 SB2021093017
SB2021110508
SB2022031104
and 39 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56680 - Out-of-bounds read
CVE-2021-36160		 CWE-125 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 22 more
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33193		 CWE-444 Medium
No
No
 - 13.09.2021 SB2021091317
SB2021091707
SB2021092301
and 24 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 - 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU56018 - Memory corruption
CVE-2021-22543		 CWE-119 Low
Available
No
 - 20.08.2021 SB2021052641
SB2021082206
SB2021083123
and 56 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-36221		 CWE-362 Medium
No
No
 - 10.08.2021 SB2021081001
SB2021081217
SB2021081219
and 32 more
#VU55091 - Improper input validation
CVE-2021-2372		 CWE-20 Low
No
No
 - 20.07.2021 SB2021072058
SB2021092222
SB2021101334
and 28 more
#VU55066 - Improper input validation
CVE-2021-2385		 CWE-20 Medium
No
No
 - 20.07.2021 SB2021072058
SB2021092222
SB2021101334
and 9 more


Showing elements 1981 - 2000 out of 3943