Known vulnerabilities in Amazon Linux AMI - page 118

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28180 - NULL Pointer Dereference
CVE-2020-10711		 CWE-476 Medium
No
No
 - 22.05.2020 SB2020052209
SB2020052210
SB2020052211
and 30 more
#VU27309 - Stack-based buffer overflow
CVE-2020-10942		 CWE-121 Low
No
No
 - 24.04.2020 SB2020032423
SB2020042441
SB2022121922
and 5 more
#VU27258 - Insufficiently Protected Credentials
CVE-2020-5260		 CWE-522 Medium
Available
No
 - 23.04.2020 SB2020042343
SB2020042344
SB2020042345
and 27 more
#VU26149 - Integer overflow
CVE-2020-10531		 CWE-190 High
No
No
 - 17.03.2020 SB2020031801
SB2020031802
SB2020031803
and 40 more
#VU25847 - Improper Access Control
CVE-2019-19921		 CWE-284 Low
No
No
 - 10.03.2020 SB2020021224
SB2020031004
SB2020031116
and 35 more
#VU25814 - Exposure of sensitive information to an unauthorized actor
CVE-2020-2732		 CWE-200 Low
No
No
 - 08.03.2020 SB2020022529
SB2020030803
SB2020051520
and 7 more
#VU25091 - Improper input validation
CVE-2020-2593		 CWE-20 Medium
No
No
 - 10.02.2020 SB2020012726
SB2020012727
SB2020012232
and 31 more
#VU25093 - Improper input validation
CVE-2020-2590		 CWE-20 Low
No
No
 - 10.02.2020 SB2020012726
SB2020012727
SB2020012232
and 33 more
#VU25095 - Improper input validation
CVE-2020-2583		 CWE-20 Low
No
No
 - 10.02.2020 SB2020012726
SB2020012727
SB2020012232
and 32 more
#VU25013 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-15605		 CWE-444 Medium
No
No
 - 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 19 more
#VU28416 - Use After Free
CVE-2020-8648		 CWE-416 Low
No
No
 - 06.02.2020 SB2020020621
SB2020042441
SB2021062102
and 10 more
#VU24810 - Stack-based buffer overflow
CVE-2019-18634		 CWE-121 Low
Available
No
 - 31.01.2020 SB2020013120
SB2020013121
SB2020020102
and 17 more
#VU23562 - Improper input validation
CVE-2019-11729		 CWE-20 Medium
No
No
 - 12.12.2019 SB2019062813
SB2019121210
SB2020031903
and 11 more
#VU23050 - Out-of-bounds write
CVE-2019-11745		 CWE-787 High
No
No
 - 28.11.2019 SB2019112801
SB2019112802
SB2019120312
and 29 more
#VU18089 - Stack-based buffer overflow
CVE-2019-7524		 CWE-121 Low
No
No
 - 28.03.2019 SB2019032801
SB2019032901
SB2019040102
and 10 more
#VU17374 - Authentication Bypass Issues
CVE-2019-3814		 CWE-592 Medium
No
No
 - 05.02.2019 SB2019020504
SB2019020615
SB2019020616
and 9 more
#VU16219 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-12404		 CWE-300 Medium
No
No
 - 04.12.2018 SB2018120401
SB2018120402
SB2018121303
and 14 more
#VU16168 - Heap-based Buffer Overflow
CVE-2018-12121		 CWE-122 Low
No
No
 - 29.11.2018 SB2018112906
SB2019012702
SB2019012803
and 8 more
#VU14577 - Memory corruption
CVE-2018-14622		 CWE-476 Low
No
No
 - 30.08.2018 SB2018083103
SB2017080114
SB2020042402
and 1 more
#VU12575 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-7159		 CWE-113 Low
No
No
 - 10.05.2018 SB2018051406
SB2019080616
SB2020042404
and 8 more


Showing elements 2341 - 2360 out of 3943