Known vulnerabilities in Amazon Linux AMI - page 116

Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28556 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-13401
CWE-451 Medium
Available
No
- 03.06.2020 SB2020060335
SB2020060336
SB2020062305
and 7 more
#VU28196 - Use After Free
CVE-2018-10756
CWE-416 High
No
No
- 25.05.2020 SB2020052503
SB2020071723
SB2020072706
and 6 more
#VU28163 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-12663
CWE-835 Medium
No
No
- 21.05.2020 SB2020052127
SB2020052128
SB2020052711
and 15 more
#VU28161 - Improper input validation
CVE-2020-12662
CWE-20 Medium
No
No
- 21.05.2020 SB2020052127
SB2020052128
SB2020052711
and 15 more
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484
CWE-502 High
Available
No
- 21.05.2020 SB2020052124
SB2020052501
SB2020053102
and 47 more
#VU27959 - Out-of-bounds read
CVE-2020-12783
CWE-125 Medium
No
No
- 18.05.2020 SB2020051804
SB2020051805
SB2020052108
and 7 more
#VU27882 - Out-of-bounds write
CVE-2020-12762
CWE-787 High
No
No
- 13.05.2020 SB2020051323
SB2020052812
SB2020061526
and 54 more
#VU26625 - Memory corruption
CVE-2020-10188
CWE-119 High
No
No
- 07.04.2020 SB2020030621
SB2020040704
SB2020040705
and 20 more
#VU26355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10108
CWE-444 Medium
No
No
- 24.03.2020 SB2020031234
SB2020032419
SB2020043012
and 11 more
#VU25721 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-8130
CWE-78 High
No
No
- 02.03.2020 SB2020030203
SB2020033103
SB2020052720
and 5 more
#VU25458 - Heap-based Buffer Overflow
CVE-2020-7039
CWE-122 Low
No
No
- 19.02.2020 SB2020021912
SB2020031117
SB2020031053
and 25 more
#VU25456 - Memory corruption
CVE-2020-8608
CWE-119 Low
No
No
- 19.02.2020 SB2020021912
SB2020033013
SB2020040146
and 24 more
#VU24916 - Memory corruption
CVE-2020-8597
CWE-119 High
Available
No
- 04.02.2020 SB2020020417
SB2020022109
SB2020022301
and 19 more
#VU21785 - Improper input validation
CVE-2019-9924
CWE-20 Low
No
No
- 15.10.2019 SB2019032210
SB2019040917
SB2020040114
and 11 more
#VU19256 - Exposure of sensitive information to an unauthorized actor
CVE-2018-20852
CWE-200 Medium
No
No
- 19.07.2019 SB2019071301
SB2019082304
SB2019082305
and 16 more
#VU18303 - Missing release of memory after effective lifetime
CVE-2019-9824
CWE-401 Low
No
No
- 18.04.2019 SB2019041808
SB2019042505
SB2019080626
and 9 more
#VU17350 - Reachable Assertion
CVE-2018-20217
CWE-617 Low
No
No
- 01.02.2019 SB2019012517
SB2019011813
SB2019090310
and 9 more
#VU15378 - Buffer overflow
CVE-2018-17407
CWE-120 High
No
No
- 16.10.2018 SB2018101707
SB2018101811
SB2018121019
and 4 more
#VU14187 - Memory corruption
CVE-2018-10916
CWE-119 Medium
No
No
- 02.08.2018 SB2018080304
SB2018080305
SB2019032811
and 4 more
#VU40337 - Memory corruption
CVE-2016-3190
CWE-119 Medium
No
No
- 21.04.2016 SB2016042110
SB2020071550


Showing elements 2301 - 2320 out of 3943