Known vulnerabilities in Amazon Linux AMI - page 157

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU13103 - Improper input validation
CVE-2016-0634		 CWE-20 High
No
No
 - 28.05.2018 SB2018052514
SB2016121354
SB2017090814
and 9 more
#VU13104 - Command injection
CVE-2016-7543		 CWE-77 Low
No
No
 - 28.05.2018 SB2018052514
SB2017080113
SB2017090814
and 10 more
#VU8989 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2017-6508		 CWE-113 Low
No
No
 - 30.10.2017 SB2017103010
SB2017083115
SB2017062020
and 4 more
#VU8121 - Permissions, Privileges, and Access Controls
CVE-2016-7798		 CWE-264 Low
No
No
 - 06.09.2017 SB2017090606
SB2017083114
SB2022041131
and 3 more
#VU7889 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-1000117		 CWE-78 High
Available
No
 - 15.08.2017 SB2017081104
SB2017081201
SB2017081714
and 14 more
#VU7886 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-9800		 CWE-78 High
No
No
 - 15.08.2017 SB2017081009
SB2017081107
SB2017081604
and 8 more
#VU7875 - Improper Access Control
CVE-2017-7547		 CWE-284 Low
No
No
 - 15.08.2017 SB2017081007
SB2017082305
SB2017082405
and 21 more
#VU7874 - Improper Access Control
CVE-2017-7548		 CWE-284 Low
No
No
 - 15.08.2017 SB2017081007
SB2017082305
SB2017082405
and 19 more
#VU7873 - Improper Access Control
CVE-2017-7546		 CWE-284 Low
No
No
 - 15.08.2017 SB2017081007
SB2017082305
SB2017082405
and 22 more
#VU7662 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7488		 CWE-200 Low
No
No
 - 02.08.2017 SB2017050914
SB2017083112
SB2017051636
#VU10284 - Improper Access Control
CVE-2017-3635		 CWE-284 Low
No
No
 - 01.07.2017 SB2017072005
SB2017072006
SB2017072007
and 9 more
#VU10300 - Improper Access Control
CVE-2017-3651		 CWE-284 Low
No
No
 - 01.07.2017 SB2017072005
SB2017072006
SB2017072007
and 10 more
#VU10301 - Improper Access Control
CVE-2017-3652		 CWE-284 Low
No
No
 - 01.07.2017 SB2017072005
SB2017072006
SB2017072007
and 9 more
#VU10303 - Improper Access Control
CVE-2017-3653		 CWE-284 Low
No
No
 - 01.07.2017 SB2017072005
SB2017072006
SB2017072007
and 14 more
#VU7268 - Integer overflow
CVE-2017-0553		 CWE-190 Low
No
No
 - 28.06.2017 SB2017063008
SB2017080108
SB2017061903
and 4 more
#VU7084 - Out-of-bounds write
CVE-2017-7773		 CWE-787 High
No
No
 - 14.06.2017 SB2017061404
SB2017062012
SB2017070507
and 15 more
#VU7083 - Out-of-bounds write
CVE-2017-7772		 CWE-787 High
No
No
 - 14.06.2017 SB2017061404
SB2017062012
SB2017070507
and 15 more
#VU7081 - Out-of-bounds write
CVE-2017-7778		 CWE-787 High
No
No
 - 14.06.2017 SB2017061404
SB2017062012
SB2017070507
and 20 more
#VU6675 - Improper Access Control
CVE-2017-5648		 CWE-284 Low
No
No
 - 24.05.2017 SB2017052404
SB2017111701
SB2017111702
and 10 more
#VU33511 - Use After Free
CVE-2016-9401		 CWE-416 Low
No
No
 - 23.01.2017 SB2017011343
SB2017083137
SB2017010103
and 3 more


Showing elements 3121 - 3140 out of 3943