Known vulnerabilities in Amazon Linux AMI - page 11

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87120 - Out-of-bounds read
CVE-2022-47673		 CWE-125 Low
No
No
 - 05.03.2024 SB2024011543
SB2024041610
SB2024061707
and 5 more
#VU85405 - Heap-based Buffer Overflow
CVE-2022-45703		 CWE-122 Medium
No
No
 - 15.01.2024 SB2024011543
SB2024011544
SB2024041610
and 7 more
#VU82600 - Reachable Assertion
CVE-2022-38349		 CWE-617 Low
No
No
 - 31.10.2023 SB2023103149
SB2023103150
SB2023103151
and 11 more
#VU81045 - Security Features
CVE-2023-4039		 CWE-254 Medium
No
No
 - 21.09.2023 SB2023092156
SB2023092201
SB2023092204
and 22 more
#VU80421 - Out-of-bounds read
CVE-2022-48554		 CWE-125 Low
No
No
 - 05.09.2023 SB2023090535
SB2023090536
SB2023091257
and 52 more
#VU79749 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-46751		 CWE-611 High
No
No
 - 21.08.2023 SB2023082105
SB2023090730
SB2023101825
and 18 more
#VU79633 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-20197		 CWE-835 Medium
No
No
 - 16.08.2023 SB20230816163
SB20230821217
SB20230821218
and 21 more
#VU78682 - Use After Free
CVE-2023-35942		 CWE-416 Medium
No
No
 - 26.07.2023 SB2023072633
SB2023072636
SB2023081405
and 3 more
#VU78681 - Use After Free
CVE-2023-35943		 CWE-416 Medium
No
No
 - 26.07.2023 SB2023072633
SB2023072636
SB2023081403
and 3 more
#VU78679 - Improper input validation
CVE-2023-35944		 CWE-20 High
No
No
 - 26.07.2023 SB2023072633
SB2023072636
SB2023081403
and 4 more
#VU78678 - Improper Encoding or Escaping of Output
CVE-2023-35941		 CWE-116 High
No
No
 - 26.07.2023 SB2023072633
SB2023072636
SB2023081403
and 4 more
#VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31147		 CWE-338 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 39 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130		 CWE-124 Low
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31124		 CWE-338 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 33 more
#VU76423 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 - 23.05.2023 SB2023052312
SB2023053021
SB2023060711
and 35 more
#VU76422 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU75586 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
CVE-2023-30624		 CWE-758 Low
No
No
 - 28.04.2023 SB2023042810
SB2023060840
SB202502194444
#VU75444 - Improper input validation
CVE-2023-1981		 CWE-20 Low
No
No
 - 24.04.2023 SB2023042420
SB2023042421
SB2023042548
and 23 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 - 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191		 CWE-327 Medium
No
No
 - 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more


Showing elements 201 - 220 out of 3943