Known vulnerabilities in Amazon Linux AMI - page 133

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17910 - NULL Pointer Dereference
CVE-2019-9213		 CWE-476 Low
Available
No
 - 06.03.2019 SB2019030604
SB2019032611
SB2019042310
and 6 more
#VU17831 - Missing release of memory after effective lifetime
CVE-2019-8980		 CWE-401 Medium
No
No
 - 22.02.2019 SB2019032611
SB2019041250
SB2020042877
and 5 more
#VU17829 - Out-of-bounds read
CVE-2019-8904		 CWE-125 Low
No
No
 - 22.02.2019 SB2019022104
SB2019031803
SB2019030303
and 3 more
#VU17823 - Out-of-bounds read
CVE-2019-8906		 CWE-125 Low
No
No
 - 21.02.2019 SB2019022104
SB2019031803
SB2019041205
and 8 more
#VU17822 - Stack-based buffer overflow
CVE-2019-8907		 CWE-121 Low
No
No
 - 21.02.2019 SB2019022104
SB2019031803
SB2019041205
and 7 more
#VU17821 - Out-of-bounds read
CVE-2019-8905		 CWE-125 Low
No
No
 - 21.02.2019 SB2019022104
SB2019031803
SB2019041205
and 7 more
#VU17804 - Use After Free
CVE-2019-8912		 CWE-416 Low
No
No
 - 20.02.2019 SB2019022009
SB2019031107
SB2019041250
and 3 more
#VU17555 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2019-6974		 CWE-362 Low
No
No
 - 12.02.2019 SB2019021909
SB2019092104
SB2019112614
and 6 more
#VU17245 - Resource exhaustion
CVE-2019-6486		 CWE-400 Low
No
No
 - 24.01.2019 SB2019012802
SB2019012425
SB2019012426
and 12 more
#VU17179 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-0190		 CWE-835 Medium
No
No
 - 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 7 more
#VU17178 - Improper Access Control
CVE-2018-17199		 CWE-284 Low
No
No
 - 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 18 more
#VU17177 - Improper input validation
CVE-2018-17189		 CWE-20 Medium
No
No
 - 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 18 more
#VU17046 - Permissions, Privileges, and Access Controls
CVE-2019-2532		 CWE-264 Low
No
No
 - 17.01.2019 SB2019011701
SB2019012516
SB2019032613
and 3 more
#VU17045 - Permissions, Privileges, and Access Controls
CVE-2019-2486		 CWE-264 Low
No
No
 - 17.01.2019 SB2019011701
SB2019012516
SB2019032613
and 3 more
#VU17043 - Permissions, Privileges, and Access Controls
CVE-2019-2528		 CWE-264 Low
No
No
 - 17.01.2019 SB2019011701
SB2019012516
SB2019032613
and 3 more
#VU17039 - Permissions, Privileges, and Access Controls
CVE-2019-2420		 CWE-264 Low
No
No
 - 17.01.2019 SB2019011701
SB2019012516
SB2019032613
and 3 more
#VU17033 - Permissions, Privileges, and Access Controls
CVE-2019-2510		 CWE-264 Low
No
No
 - 17.01.2019 SB2019011701
SB2019012516
SB2019032613
and 7 more
#VU17027 - Permissions, Privileges, and Access Controls
CVE-2019-2434		 CWE-264 Low
No
No
 - 17.01.2019 SB2019011701
SB2019012516
SB2019032613
and 3 more
#VU16183 - Heap-based Buffer Overflow
CVE-2018-18311		 CWE-190 High
No
No
 - 30.11.2018 SB2018113006
SB2018122304
SB2019010202
and 17 more
#VU13453 - Out-of-bounds read
CVE-2018-10360		 CWE-125 Low
No
No
 - 23.06.2018 SB2018062513
SB2018073101
SB2019041205
and 10 more


Showing elements 2641 - 2660 out of 3943