Known vulnerabilities in Amazon Linux AMI - page 118

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28180 - NULL Pointer Dereference
CVE-2020-10711		 CWE-476 Medium
No
No
 - 22.05.2020 SB2020052209
SB2020052210
SB2020052211
and 30 more
#VU27667 - Out-of-bounds write
CVE-2019-12521		 CWE-787 Medium
No
No
 - 11.05.2020 SB2020042377
SB2020051116
SB2020051133
and 7 more
#VU27309 - Stack-based buffer overflow
CVE-2020-10942		 CWE-121 Low
No
No
 - 24.04.2020 SB2020032423
SB2020042441
SB2022121922
and 5 more
#VU26979 - Out-of-bounds read
CVE-2020-7067		 CWE-125 Medium
No
No
 - 16.04.2020 SB2020041609
SB2020051426
SB2020051427
and 5 more
#VU26260 - Stack-based buffer overflow
CVE-2020-7065		 CWE-121 High
No
No
 - 20.03.2020 SB2020032006
SB2020032625
SB2020051109
and 9 more
#VU26259 - Out-of-bounds read
CVE-2020-7064		 CWE-125 Low
No
No
 - 20.03.2020 SB2020032006
SB2020032625
SB2020051109
and 13 more
#VU26257 - Improper input validation
CVE-2020-7066		 CWE-20 Low
No
No
 - 20.03.2020 SB2020032006
SB2020032625
SB2020051109
and 13 more
#VU26149 - Integer overflow
CVE-2020-10531		 CWE-190 High
No
No
 - 17.03.2020 SB2020031801
SB2020031802
SB2020031803
and 40 more
#VU25814 - Exposure of sensitive information to an unauthorized actor
CVE-2020-2732		 CWE-200 Low
No
No
 - 08.03.2020 SB2020022529
SB2020030803
SB2020051520
and 7 more
#VU25013 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-15605		 CWE-444 Medium
No
No
 - 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 19 more
#VU28416 - Use After Free
CVE-2020-8648		 CWE-416 Low
No
No
 - 06.02.2020 SB2020020621
SB2020042441
SB2021062102
and 10 more
#VU24810 - Stack-based buffer overflow
CVE-2019-18634		 CWE-121 Low
Available
No
 - 31.01.2020 SB2020013120
SB2020013121
SB2020020102
and 17 more
#VU19256 - Exposure of sensitive information to an unauthorized actor
CVE-2018-20852		 CWE-200 Medium
No
No
 - 19.07.2019 SB2019071301
SB2019082304
SB2019082305
and 16 more
#VU18089 - Stack-based buffer overflow
CVE-2019-7524		 CWE-121 Low
No
No
 - 28.03.2019 SB2019032801
SB2019032901
SB2019040102
and 10 more
#VU17374 - Authentication Bypass Issues
CVE-2019-3814		 CWE-592 Medium
No
No
 - 05.02.2019 SB2019020504
SB2019020615
SB2019020616
and 9 more
#VU17350 - Reachable Assertion
CVE-2018-20217		 CWE-617 Low
No
No
 - 01.02.2019 SB2019012517
SB2019011813
SB2019090310
and 9 more
#VU16168 - Heap-based Buffer Overflow
CVE-2018-12121		 CWE-122 Low
No
No
 - 29.11.2018 SB2018112906
SB2019012702
SB2019012803
and 8 more
#VU14577 - Memory corruption
CVE-2018-14622		 CWE-476 Low
No
No
 - 30.08.2018 SB2018083103
SB2017080114
SB2020042402
and 1 more
#VU13370 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0495		 CWE-200 Low
Available
No
 - 16.06.2018 SB2018061705
SB2018061412
SB2018061801
and 22 more
#VU12575 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-7159		 CWE-113 Low
No
No
 - 10.05.2018 SB2018051406
SB2019080616
SB2020042404
and 8 more


Showing elements 2341 - 2360 out of 3943