Known vulnerabilities in Amazon Linux AMI - page 145

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU11798 - NULL Pointer Dereference
CVE-2018-6249		 CWE-476 Low
No
No
 - 12.04.2018 SB2018032827
SB2018040510
#VU11797 - Buffer Access with Incorrect Length Value
CVE-2018-6248		 CWE-805 Low
No
No
 - 12.04.2018 SB2018032827
SB2018040510
#VU11796 - NULL Pointer Dereference
CVE-2018-6250		 CWE-476 Low
No
No
 - 12.04.2018 SB2018032827
SB2018040510
#VU11795 - Out-of-bounds write
CVE-2018-6251		 CWE-787 Low
No
No
 - 12.04.2018 SB2018032827
SB2018040510
#VU11794 - Improper Access Control
CVE-2018-6252		 CWE-284 Low
No
No
 - 12.04.2018 SB2018032827
SB2018040510
#VU11793 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-6253		 CWE-835 Low
No
No
 - 12.04.2018 SB2018032827
SB2018040510
#VU11792 - NULL Pointer Dereference
CVE-2018-6247		 CWE-476 Low
No
No
 - 12.04.2018 SB2018032827
SB2018040510
#VU11649 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-1000075		 CWE-835 Low
No
No
 - 10.04.2018 SB2018040507
SB2018061002
SB2018080117
and 12 more
#VU11648 - Improper Verification of Cryptographic Signature
CVE-2018-1000076		 CWE-347 Low
No
No
 - 10.04.2018 SB2018040507
SB2018061002
SB2018080117
and 12 more
#VU11647 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1000073		 CWE-22 Low
No
No
 - 10.04.2018 SB2018021520
SB2018040507
SB2018061002
and 13 more
#VU11628 - Improper input validation
CVE-2018-1000077		 CWE-20 Low
No
No
 - 09.04.2018 SB2018021520
SB2018040507
SB2018061002
and 13 more
#VU11130 - Authentication Bypass Issues
CVE-2018-7750		 CWE-592 Low
Available
No
 - 16.03.2018 SB2018031604
SB2018032401
SB2018032815
and 16 more
#VU11140 - Out-of-bounds write
CVE-2018-5146		 CWE-787 High
No
No
 - 16.03.2018 SB2018031605
SB2018031611
SB2018031701
and 21 more
#VU10911 - Out-of-bounds read
CVE-2018-1054		 CWE-125 Low
No
No
 - 12.03.2018 SB2018031201
SB2018040603
SB2018031339
and 1 more
#VU10848 - Command injection
CVE-2017-17790		 CWE-77 Low
No
No
 - 06.03.2018 SB2018011015
SB2018040507
SB2018080117
and 8 more
#VU10810 - Uncontrolled Search Path Element
CVE-2018-1058		 CWE-427 Low
No
No
 - 02.03.2018 SB2018030209
SB2018031101
SB2018040602
and 5 more
#VU10791 - Memory corruption
CVE-2018-5733		 CWE-119 Low
No
No
 - 01.03.2018 SB2018030103
SB2018030201
SB2018030502
and 12 more
#VU10790 - Buffer overflow
CVE-2018-5732		 CWE-120 Low
No
No
 - 01.03.2018 SB2018030103
SB2018030201
SB2018030501
and 14 more
#VU10445 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5950		 CWE-79 Low
Available
No
 - 09.02.2018 SB2018021001
SB2018021002
SB2018021003
and 5 more
#VU365 - Cross-Site Request Forgery (CSRF)
CVE-2016-6893		 CWE-352 Medium
No
No
 - 07.09.2016 SB2016090702
SB2018040606
SB2021120306
and 3 more


Showing elements 2881 - 2900 out of 3943