Known vulnerabilities in Amazon Linux AMI - page 13
Vendor:
Amazon Web Services
Software:
Amazon Linux AMI
Software CPE:
cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website:
https://aws.amazon.com/
Total vulnerabilities:
3943
Public exploits:
290
Known exploited (KEV):
53
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
Vulnerabilities (3943)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU79569 - Out-of-bounds write CVE-2023-30086 |
CWE-787 | Medium | - | 16.08.2023 | - | ||
| #VU78490 - Permissions, Privileges, and Access Controls CVE-2023-34969 |
CWE-264 | Low | - | 21.07.2023 | - | ||
| #VU78002 - Use After Free CVE-2023-3269 |
CWE-416 | Low | - | 05.07.2023 | - | ||
| #VU77905 - Incorrect Default Permissions CVE-2023-24626 |
CWE-276 | Low | - | 03.07.2023 | - | ||
| #VU77812 - Missing release of memory after effective lifetime CVE-2023-33460 |
CWE-401 | Medium | - | 29.06.2023 | - | ||
| #VU77351 - Improper input validation CVE-2023-29499 |
CWE-20 | Medium | - | 15.06.2023 | - | ||
| #VU77350 - Resource exhaustion CVE-2023-32611 |
CWE-400 | Medium | - | 15.06.2023 | - | ||
| #VU77349 - Resource exhaustion CVE-2023-32665 |
CWE-400 | Medium | - | 15.06.2023 | - | ||
| #VU77320 - Out-of-bounds read CVE-2023-2977 |
CWE-125 | Low | - | 14.06.2023 | - | ||
| #VU76486 - Heap-based Buffer Overflow CVE-2023-1972 |
CWE-122 | Medium | - | 24.05.2023 | - | ||
| #VU76383 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-24805 |
CWE-78 | Medium | - | 19.05.2023 | - | ||
| #VU74190 - Improper Access Control CVE-2023-27561 |
CWE-284 | Low | - | 30.03.2023 | - | ||
| #VU74189 - Improper preservation of permissions CVE-2023-25809 |
CWE-281 | Low | - | 30.03.2023 | - | ||
| #VU74040 - Stack-based buffer overflow CVE-2023-22652 |
CWE-121 | High | - | 27.03.2023 | - | ||
| #VU74039 - Stack-based buffer overflow CVE-2023-32181 |
CWE-121 | High | - | 27.03.2023 | - | ||
| #VU73915 - Out-of-bounds read CVE-2022-4645 |
CWE-125 | Medium | - | 22.03.2023 | - | ||
| #VU72399 - Resource Management Errors CVE-2023-23919 |
CWE-399 | Medium | - | 20.02.2023 | - | ||
| #VU71379 - Incorrect Regular Expression CVE-2022-40897 |
CWE-185 | Medium | - | 20.01.2023 | - | ||
| #VU69582 - NULL Pointer Dereference CVE-2022-36227 |
CWE-476 | Low | - | 24.11.2022 | - | ||
| #VU65327 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-31081 |
CWE-444 | Medium | - | 14.07.2022 | - |
Showing elements 241 - 260 out of 3943