Known vulnerabilities in Amazon Linux AMI - page 15

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79963 - Out-of-bounds read
CVE-2023-4156		 CWE-125 Low
No
No
 - 24.08.2023 SB2023082451
SB2023082453
SB2023082810
and 9 more
#VU79803 - Memory corruption
CVE-2023-39976		 CWE-119 High
No
No
 - 21.08.2023 SB20230821103
SB20230821228
SB2023082854
and 22 more
#VU79767 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40225		 CWE-444 Medium
No
No
 - 21.08.2023 SB2023082120
SB2023082121
SB2023082122
and 17 more
#VU79312 - Improper input validation
CVE-2023-3649		 CWE-20 Medium
No
No
 - 09.08.2023 SB2023080949
SB2023091569
SB2024090957
and 2 more
#VU79311 - Improper input validation
CVE-2023-3648		 CWE-20 Medium
No
No
 - 09.08.2023 SB2023080949
SB2023080951
SB2023081210
and 2 more
#VU79308 - Reachable Assertion
CVE-2023-38471		 CWE-617 Low
No
No
 - 09.08.2023 SB2023080944
SB2023080945
SB2023112057
and 31 more
#VU79307 - Reachable Assertion
CVE-2023-38470		 CWE-617 Medium
No
No
 - 09.08.2023 SB2023080944
SB2023080945
SB2023112057
and 31 more
#VU79306 - Reachable Assertion
CVE-2023-38469		 CWE-617 Medium
No
No
 - 09.08.2023 SB2023080944
SB2023080945
SB2023112057
and 31 more
#VU78695 - Integer overflow
CVE-2023-38403		 CWE-190 Medium
No
No
 - 26.07.2023 SB2023072650
SB2023072652
SB2023073158
and 21 more
#VU78577 - Out-of-bounds read
CVE-2022-2127		 CWE-125 Medium
No
No
 - 24.07.2023 SB2023072430
SB2023072432
SB2023072433
and 34 more
#VU78576 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34968		 CWE-200 Low
No
No
 - 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 27 more
#VU78575 - Type confusion
CVE-2023-34967		 CWE-843 Medium
No
No
 - 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 32 more
#VU78574 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-34966		 CWE-835 Medium
No
No
 - 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 35 more
#VU78573 - Security Features
CVE-2023-3347		 CWE-254 Medium
No
No
 - 24.07.2023 SB2023072431
SB2023072437
SB2023073157
and 16 more
#VU78454 - Untrusted Search Path
CVE-2023-38408		 CWE-426 Medium
Available
No
 - 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 74 more
#VU77939 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-36664		 CWE-78 High
Available
No
 - 04.07.2023 SB2023070430
SB2023070432
SB2023071037
and 18 more
#VU68819 - Out-of-bounds write
CVE-2022-3597		 CWE-787 High
No
No
 - 28.10.2022 SB2022102808
SB2022112821
SB2022112857
and 11 more
#VU68817 - Out-of-bounds write
CVE-2022-3627		 CWE-787 High
No
No
 - 28.10.2022 SB2022102808
SB2022111719
SB2022112821
and 24 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 - 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU2015 - Improper input validation
CVE-2016-10009		 CWE-20 Low
Available
No
 - 19.12.2016 SB2016122003
SB2017011102
SB2016122004
and 21 more


Showing elements 281 - 300 out of 3943