Known vulnerabilities in Amazon Linux AMI - page 119

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25806 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17569		 CWE-444 Medium
No
No
 - 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 6 more
#VU25594 - NULL Pointer Dereference
CVE-2020-7062		 CWE-476 Medium
No
No
 - 25.02.2020 SB2020022518
SB2020031403
SB2020031404
and 12 more
#VU25593 - Heap-based Buffer Overflow
CVE-2020-7061		 CWE-122 High
No
No
 - 25.02.2020 SB2020022518
SB2020031403
SB2020031404
and 6 more
#VU25592 - Incorrect Default Permissions
CVE-2020-7063		 CWE-276 Low
No
No
 - 25.02.2020 SB2020022518
SB2020031403
SB2020031404
and 12 more
#VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1938		 CWE-22 High
Available
Exploited
 - 21.02.2020 SB2020022111
SB2020031401
SB2020031402
and 31 more
#VU25110 - Out-of-bounds read
CVE-2020-7060		 CWE-125 High
No
No
 - 10.02.2020 SB2020021009
SB2020021722
SB2020022721
and 14 more
#VU25109 - Out-of-bounds read
CVE-2020-7059		 CWE-125 High
No
No
 - 10.02.2020 SB2020021009
SB2020021722
SB2020022721
and 12 more
#VU25088 - Improper input validation
CVE-2020-2601		 CWE-20 Medium
No
No
 - 10.02.2020 SB2020012726
SB2020012727
SB2020012232
and 34 more
#VU25092 - Improper input validation
CVE-2020-2654		 CWE-20 Low
No
No
 - 10.02.2020 SB2020012726
SB2020012727
SB2020012232
and 32 more
#VU25094 - Improper input validation
CVE-2020-2659		 CWE-20 Low
No
No
 - 10.02.2020 SB2020012727
SB2020012232
SB2020012117
and 28 more
#VU25077 - Improper input validation
CVE-2020-2604		 CWE-20 High
No
No
 - 07.02.2020 SB2020011491
SB2020012726
SB2020012727
and 35 more
#VU30493 - Missing release of memory after effective lifetime
CVE-2019-20096		 CWE-401 Medium
No
No
 - 30.12.2019 SB2019111442
SB2020031335
SB2021123021
and 1 more
#VU22332 - Use After Free
CVE-2019-18408		 CWE-416 High
No
No
 - 29.10.2019 SB2019102911
SB2019102912
SB2019110110
and 11 more
#VU21440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16935		 CWE-79 Medium
No
No
 - 30.09.2019 SB2019093008
SB2019111003
SB2019111004
and 24 more
#VU21237 - Unprotected Storage of Credentials
CVE-2019-15635		 CWE-256 Low
No
No
 - 20.09.2019 SB2019092013
SB2019092407
SB2019092510
and 4 more
#VU21045 - Cryptographic Issues
CVE-2019-1563		 CWE-310 Low
No
No
 - 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 27 more
#VU20971 - Out-of-bounds read
CVE-2015-9382		 CWE-125 Low
No
No
 - 10.09.2019 SB2019121710
SB2020031405
SB2021011415
#VU20970 - Out-of-bounds read
CVE-2015-9381		 CWE-125 Low
No
No
 - 10.09.2019 SB2019121710
SB2020031405
SB2021011415
#VU20962 - Improper input validation
CVE-2019-15639		 CWE-20 Medium
No
No
 - 10.09.2019 SB2019091202
SB2019092407
SB2019092510
and 5 more
#VU30794 - Out-of-bounds read
CVE-2019-15918		 CWE-125 Low
No
No
 - 04.09.2019 SB2019090442
SB2020031335


Showing elements 2361 - 2380 out of 3943