Known vulnerabilities in Amazon Linux AMI - page 13

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80586 - Use After Free
CVE-2023-4208		 CWE-416 Low
No
No
 - 11.09.2023 SB2023091128
SB2023091130
SB2023092702
and 52 more
#VU80585 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41105		 CWE-22 Low
No
No
 - 11.09.2023 SB2023082825
SB2023100328
SB2023100362
and 18 more
#VU80584 - Missing release of memory after effective lifetime
CVE-2023-4569		 CWE-401 Low
No
No
 - 11.09.2023 SB2023091126
SB2023091130
SB2023091456
and 24 more
#VU80583 - Use After Free
CVE-2023-4622		 CWE-416 Low
No
No
 - 11.09.2023 SB2023091124
SB2023091130
SB2023092702
and 110 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 - 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU79962 - Heap-based Buffer Overflow
CVE-2023-40305		 CWE-122 High
No
No
 - 24.08.2023 SB2023082446
SB2023082447
SB2023082448
and 8 more
#VU79869 - Missing release of memory after effective lifetime
CVE-2023-39978		 CWE-401 Medium
No
No
 - 22.08.2023 SB2023082240
SB2023082247
SB2023082813
and 3 more
#VU79586 - Access of Uninitialized Pointer
CVE-2023-36054		 CWE-824 Medium
No
No
 - 16.08.2023 SB2023081621
SB2023081623
SB2023081624
and 51 more
#VU79487 - Stack-based buffer overflow
CVE-2023-4273		 CWE-121 Low
No
No
 - 14.08.2023 SB2023081438
SB2023082053
SB20230821195
and 57 more
#VU79454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39417		 CWE-89 Medium
No
No
 - 11.08.2023 SB2023081132
SB2023081715
SB2023081716
and 60 more
#VU79344 - Double Free
CVE-2023-39975		 CWE-415 Medium
No
No
 - 10.08.2023 SB2023081014
SB20230821173
SB2023110766
and 26 more
#VU79182 - Improper input validation
CVE-2023-35390		 CWE-20 High
No
No
 - 08.08.2023 SB2023080884
SB2023080903
SB2023081036
and 12 more
#VU79145 - Improper input validation
CVE-2023-38180		 CWE-20 High
No
Exploited
 - 08.08.2023 SB2023080865
SB2023080903
SB2023081036
and 12 more
#VU78978 - Memory corruption
CVE-2023-3824		 CWE-119 Critical
Available
Exploited
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823		 CWE-611 High
No
No
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU78930 - Incorrect Default Permissions
CVE-2023-38497		 CWE-276 Low
Available
No
 - 03.08.2023 SB2023080354
SB2023080355
SB2023080365
and 16 more
#VU78756 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-38633		 CWE-22 Medium
No
No
 - 28.07.2023 SB2023072832
SB2023072902
SB2023080153
and 13 more
#VU77112 - Use of Insufficiently Random Values
CVE-2023-3247		 CWE-330 Medium
No
No
 - 09.06.2023 SB2023060919
SB2023061105
SB2023061516
and 24 more
#VU76308 - Improper Authentication
CVE-2023-32360		 CWE-287 Medium
No
No
 - 18.05.2023 SB2023051860
SB2023051901
SB2023051902
and 36 more
#VU72742 - Type confusion
CVE-2023-1076		 CWE-843 Low
No
No
 - 03.03.2023 SB2023030317
SB2023031727
SB2023032843
and 47 more


Showing elements 241 - 260 out of 3943