Known vulnerabilities in Amazon Linux AMI - page 119

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25806 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17569		 CWE-444 Medium
No
No
 - 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 6 more
#VU25594 - NULL Pointer Dereference
CVE-2020-7062		 CWE-476 Medium
No
No
 - 25.02.2020 SB2020022518
SB2020031403
SB2020031404
and 12 more
#VU25593 - Heap-based Buffer Overflow
CVE-2020-7061		 CWE-122 High
No
No
 - 25.02.2020 SB2020022518
SB2020031403
SB2020031404
and 6 more
#VU25592 - Incorrect Default Permissions
CVE-2020-7063		 CWE-276 Low
No
No
 - 25.02.2020 SB2020022518
SB2020031403
SB2020031404
and 12 more
#VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1938		 CWE-22 High
Available
Exploited
 - 21.02.2020 SB2020022111
SB2020031401
SB2020031402
and 31 more
#VU25109 - Out-of-bounds read
CVE-2020-7059		 CWE-125 High
No
No
 - 10.02.2020 SB2020021009
SB2020021722
SB2020022721
and 12 more
#VU25088 - Improper input validation
CVE-2020-2601		 CWE-20 Medium
No
No
 - 10.02.2020 SB2020012726
SB2020012727
SB2020012232
and 34 more
#VU25091 - Improper input validation
CVE-2020-2593		 CWE-20 Medium
No
No
 - 10.02.2020 SB2020012726
SB2020012727
SB2020012232
and 31 more
#VU25092 - Improper input validation
CVE-2020-2654		 CWE-20 Low
No
No
 - 10.02.2020 SB2020012726
SB2020012727
SB2020012232
and 32 more
#VU25093 - Improper input validation
CVE-2020-2590		 CWE-20 Low
No
No
 - 10.02.2020 SB2020012726
SB2020012727
SB2020012232
and 33 more
#VU25094 - Improper input validation
CVE-2020-2659		 CWE-20 Low
No
No
 - 10.02.2020 SB2020012727
SB2020012232
SB2020012117
and 28 more
#VU25095 - Improper input validation
CVE-2020-2583		 CWE-20 Low
No
No
 - 10.02.2020 SB2020012726
SB2020012727
SB2020012232
and 32 more
#VU25077 - Improper input validation
CVE-2020-2604		 CWE-20 High
No
No
 - 07.02.2020 SB2020011491
SB2020012726
SB2020012727
and 35 more
#VU30493 - Missing release of memory after effective lifetime
CVE-2019-20096		 CWE-401 Medium
No
No
 - 30.12.2019 SB2019111442
SB2020031335
SB2021123021
and 1 more
#VU23562 - Improper input validation
CVE-2019-11729		 CWE-20 Medium
No
No
 - 12.12.2019 SB2019062813
SB2019121210
SB2020031903
and 11 more
#VU23050 - Out-of-bounds write
CVE-2019-11745		 CWE-787 High
No
No
 - 28.11.2019 SB2019112801
SB2019112802
SB2019120312
and 29 more
#VU20971 - Out-of-bounds read
CVE-2015-9382		 CWE-125 Low
No
No
 - 10.09.2019 SB2019121710
SB2020031405
SB2021011415
#VU20970 - Out-of-bounds read
CVE-2015-9381		 CWE-125 Low
No
No
 - 10.09.2019 SB2019121710
SB2020031405
SB2021011415
#VU30794 - Out-of-bounds read
CVE-2019-15918		 CWE-125 Low
No
No
 - 04.09.2019 SB2019090442
SB2020031335
#VU16219 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-12404		 CWE-300 Medium
No
No
 - 04.12.2018 SB2018120401
SB2018120402
SB2018121303
and 14 more


Showing elements 2361 - 2380 out of 3943