Known vulnerabilities in Amazon Linux AMI - page 16

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82653 - Resource exhaustion
CVE-2023-4785		 CWE-400 Medium
No
No
 - 01.11.2023 SB2023110125
SB2024021549
SB2024022138
and 9 more
#VU79924 - Out-of-bounds write
CVE-2023-33546		 CWE-787 Medium
No
No
 - 23.08.2023 SB2023082346
SB2023082347
SB2024121231
and 1 more
#VU79797 - Improper input validation
CVE-2023-32731		 CWE-20 Medium
No
No
 - 21.08.2023 SB2023082198
SB2023082860
SB2023091213
and 28 more
#VU79796 - Improper input validation
CVE-2023-32732		 CWE-20 Medium
No
No
 - 21.08.2023 SB2023082198
SB20230821106
SB20230821107
and 16 more
#VU79263 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20569		 CWE-200 Low
No
No
 - 08.08.2023 SB20230808145
SB20230808146
SB2023080902
and 86 more
#VU79262 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2022-40982		 CWE-1342 Medium
No
No
 - 08.08.2023 SB20230808144
SB2023081009
SB2023081143
and 113 more
#VU79112 - Integer overflow
CVE-2022-41409		 CWE-190 Medium
No
No
 - 07.08.2023 SB2023080749
SB2023080750
SB2023081617
and 10 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 - 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU78727 - Missing release of memory after effective lifetime
CVE-2023-3576		 CWE-401 Medium
No
No
 - 27.07.2023 SB2023071613
SB2023072759
SB2023073122
and 14 more
#VU78572 - Use After Free
CVE-2023-20593		 CWE-416 Low
No
No
 - 24.07.2023 SB2023072428
SB2023072429
SB2023072553
and 134 more
#VU78506 - Heap-based Buffer Overflow
CVE-2022-24834		 CWE-122 Medium
Available
No
 - 21.07.2023 SB2023072126
SB2023072127
SB2023072128
and 21 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU78290 - Use After Free
CVE-2023-29824		 CWE-416 Low
No
No
 - 16.07.2023 SB2023071614
SB2023071617
SB2023072554
and 6 more
#VU78288 - NULL Pointer Dereference
CVE-2023-3316		 CWE-476 Medium
No
No
 - 16.07.2023 SB2023071613
SB2023071619
SB2023081007
and 17 more
#VU77812 - Missing release of memory after effective lifetime
CVE-2023-33460		 CWE-401 Medium
No
No
 - 29.06.2023 SB2023062940
SB2023081424
SB2023082180
and 19 more
#VU77781 - Memory corruption
CVE-2023-36191		 CWE-119 Low
No
No
 - 29.06.2023 SB2023062904
SB20230820273
SB20230820274
and 12 more
#VU73888 - Integer overflow
CVE-2022-38171		 CWE-190 High
No
No
 - 21.03.2023 SB2023032142
SB2023011810
SB2022090941
and 2 more
#VU71398 - Insufficient Verification of Data Authenticity
CVE-2022-23491		 CWE-345 High
No
No
 - 20.01.2023 SB2023012034
SB2023012035
SB2023012036
and 51 more
#VU67555 - Incorrect Regular Expression
CVE-2022-40023		 CWE-185 Medium
No
No
 - 21.09.2022 SB2022092139
SB2022092141
SB2022102426
and 20 more
#VU67055 - Integer overflow
CVE-2022-38784		 CWE-190 High
No
No
 - 07.09.2022 SB2022090713
SB2022090716
SB2022091306
and 17 more


Showing elements 301 - 320 out of 3943