Known vulnerabilities in Amazon Linux AMI - page 110

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83584 - NULL Pointer Dereference
CVE-2020-27675		 CWE-476 Low
No
No
 - 29.11.2023 SB2020102227
SB2021010617
SB2021010618
and 8 more
#VU56242 - Missing Authorization
CVE-2020-27777		 CWE-862 Low
No
No
 - 01.09.2021 SB2020121569
SB2021090127
SB2021090130
and 13 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU90369 - Out-of-bounds read
CVE-2020-28974		 CWE-125 Medium
No
No
 - 20.11.2020 SB2020112015
SB2021010617
SB2021010618
and 6 more
#VU92422 - Release of invalid pointer or reference
CVE-2020-28941		 CWE-763 Low
No
No
 - 19.11.2020 SB2020111914
SB2021022545
SB2021022546
and 5 more
#VU48371 - Improper Access Control
CVE-2020-8694		 CWE-284 Low
No
No
 - 11.11.2020 SB2020111117
SB2023120115
SB2023121950
and 9 more
#VU48592 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26116		 CWE-93 Medium
No
No
 - 27.09.2020 SB2020092711
SB2020112308
SB2020112309
and 34 more
#VU46580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24553		 CWE-79 Low
No
No
 - 02.09.2020 SB2020090217
SB2020091020
SB2020091021
and 20 more
#VU46117 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-15810		 CWE-444 Medium
No
No
 - 28.08.2020 SB2020082807
SB2020083119
SB2020090501
and 12 more
#VU45985 - Out-of-bounds write
CVE-2020-14364		 CWE-787 Medium
Available
No
 - 24.08.2020 SB2020082410
SB2020090715
SB2020091121
and 35 more
#VU45794 - Expired pointer dereference
CVE-2020-8231		 CWE-825 Low
No
No
 - 20.08.2020 SB2020081916
SB2020082001
SB2020081920
and 29 more
#VU29391 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-15049		 CWE-444 Medium
No
No
 - 30.06.2020 SB2020063011
SB2020090501
SB2020090724
and 10 more
#VU27389 - Use After Free
CVE-2020-1983		 CWE-416 Medium
Available
No
 - 28.04.2020 SB2020042818
SB2020043016
SB2020050725
and 16 more
#VU25019 - Out-of-bounds read
CVE-2019-12528		 CWE-125 Medium
No
No
 - 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 13 more
#VU24466 - Improper input validation
CVE-2019-14907		 CWE-20 Medium
No
No
 - 21.01.2020 SB2020012110
SB2020012301
SB2020012905
and 10 more
#VU22615 - Integer overflow
CVE-2019-17546		 CWE-190 High
No
No
 - 10.11.2019 SB2019101413
SB2019101414
SB2020012302
and 18 more
#VU20446 - Heap-based Buffer Overflow
CVE-2019-14378		 CWE-122 Medium
No
No
 - 28.08.2019 SB2019082401
SB2019090204
SB2019090303
and 22 more
#VU20390 - Integer overflow
CVE-2019-14973		 CWE-190 Medium
No
No
 - 26.08.2019 SB2019082710
SB2019110501
SB2020012302
and 15 more
#VU20053 - Divide By Zero
CVE-2019-14494		 CWE-369 Low
No
No
 - 12.08.2019 SB2019080101
SB2019081204
SB2020093030
and 5 more
#VU16553 - Improper input validation
CVE-2018-15746		 CWE-20 Low
No
No
 - 16.12.2018 SB2018121712
SB2018120730
SB2019080903
and 4 more


Showing elements 2181 - 2200 out of 3943