Known vulnerabilities in Amazon Linux AMI - page 155

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU8697 - Improper input validation
CVE-2017-7674		 CWE-20 Low
No
No
 - 05.10.2017 SB2017070102
SB2017100501
SB2017100209
and 12 more
#VU8665 - Memory corruption
CVE-2017-14496		 CWE-119 Medium
Available
No
 - 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8664 - Resource exhaustion
CVE-2017-14495		 CWE-400 Medium
Available
No
 - 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8663 - Missing release of memory after effective lifetime
CVE-2017-14494		 CWE-401 Low
Available
No
 - 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8662 - Heap-based Buffer Overflow
CVE-2017-14493		 CWE-122 Medium
Available
No
 - 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8661 - Heap-based Buffer Overflow
CVE-2017-14492		 CWE-122 Medium
Available
No
 - 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8660 - Heap-based Buffer Overflow
CVE-2017-14491		 CWE-122 High
Available
No
 - 02.10.2017 SB2017100301
SB2017100302
SB2017100304
and 24 more
#VU8489 - Buffer overflow
CVE-2017-14497		 CWE-120 Low
No
No
 - 18.09.2017 SB2017091901
SB2017100311
SB2017092032
and 2 more
#VU38300 - Memory corruption
CVE-2017-1000249		 CWE-119 Low
No
No
 - 11.09.2017 SB2017091108
SB2017100329
SB2017100808
and 2 more
#VU8122 - Command injection
CVE-2015-9096		 CWE-77 Low
No
No
 - 06.09.2017 SB2017090606
SB2017100212
SB2022041131
and 3 more
#VU8118 - Improper Restriction of Excessive Authentication Attempts
CVE-2017-7551		 CWE-307 Low
No
No
 - 06.09.2017 SB2017073111
SB2017090605
SB2017100211
#VU8013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12978		 CWE-79 Low
No
No
 - 28.08.2017 SB2017100210
SB2017082218
SB2017082219
and 2 more
#VU8008 - Out-of-bounds read
CVE-2017-7558		 CWE-125 Low
Available
No
 - 24.08.2017 SB2017082404
SB2017100311
SB2017092122
and 5 more
#VU7989 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12927		 CWE-79 Low
No
No
 - 18.08.2017 SB2017082101
SB2017100210
SB2017082218
and 3 more
#VU7270 - Stack-based buffer overflow
CVE-2017-9775		 CWE-121 High
No
No
 - 26.06.2017 SB2017063011
SB2017062611
SB2017070707
and 8 more
#VU2075 - Memory corruption
CVE-2016-10012		 CWE-119 Low
No
No
 - 21.12.2016 SB2016122003
SB2016122004
SB2016122201
and 13 more
#VU2068 - Permissions, Privileges, and Access Controls
CVE-2016-10011		 CWE-264 Low
No
No
 - 21.12.2016 SB2016122003
SB2016122201
SB2016122401
and 9 more
#VU2015 - Improper input validation
CVE-2016-10009		 CWE-20 Low
Available
No
 - 19.12.2016 SB2016122003
SB2017011102
SB2016122004
and 21 more
#VU255 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6210		 CWE-200 Medium
Available
No
 - 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 16 more
#VU252 - Resource exhaustion
CVE-2016-6515		 CWE-400 Medium
Available
No
 - 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 11 more


Showing elements 3081 - 3100 out of 3943