Known vulnerabilities in Amazon Linux AMI - page 173

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30372 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2015-5741		 CWE-444 High
No
No
 - 08.02.2020 SB2020020804
SB2015092110
SB2015082511
and 11 more
#VU30424 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2015-3154		 CWE-74 Medium
No
No
 - 27.01.2020 SB2020012733
SB2015070722
SB2015050806
and 4 more
#VU30474 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-0011		 CWE-94 High
No
No
 - 02.01.2020 SB2020010214
SB2015080407
SB2014110505
#VU33822 - Improper input validation
CVE-2015-0837		 CWE-20 Medium
No
No
 - 29.11.2019 SB2019112917
SB2015092809
SB2015080406
and 9 more
#VU30571 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3591		 CWE-200 Low
No
No
 - 29.11.2019 SB2019112915
SB2015092808
SB2015080406
and 9 more
#VU30593 - Use After Free
CVE-2015-1606		 CWE-416 High
No
No
 - 20.11.2019 SB2019112026
SB2015042303
SB2015042304
and 1 more
#VU13112 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2015-3152		 CWE-300 Low
No
No
 - 31.05.2018 SB2018053109
SB2015072805
SB2015081704
and 4 more
#VU86 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2015-4000		 CWE-300 Medium
Available
No
 - 04.07.2016 SB2015071003
SB2015070202
SB2015072201
and 36 more
#VU32405 - Improper input validation
CVE-2015-5589		 CWE-20 High
No
No
 - 16.05.2016 SB2016051610
SB2015072806
SB2015081704
and 3 more
#VU40516 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-6833		 CWE-22 Medium
No
No
 - 19.01.2016 SB2016011917
SB2015081704
SB2015081705
and 1 more
#VU40517 - Use After Free
CVE-2015-6832		 CWE-416 Medium
No
No
 - 19.01.2016 SB2016011917
SB2015081704
SB2015081705
and 1 more
#VU40518 - Improper input validation
CVE-2015-6831		 CWE-20 Medium
No
No
 - 19.01.2016 SB2016011917
SB2015081704
SB2015081705
and 1 more
#VU32406 - Stack-based buffer overflow
CVE-2015-5590		 CWE-121 Medium
No
No
 - 19.01.2016 SB2016011911
SB2015072807
SB2015081704
and 3 more
#VU31954 - Data Handling
CVE-2015-5477		 CWE-19 Medium
No
No
 - 29.07.2015 SB2015072902
SB2016012505
SB2015073004
and 10 more
#VU33821 - Improper input validation
CVE-2015-3183		 CWE-20 Medium
No
No
 - 21.07.2015 SB2015072102
SB2015101506
SB2015081708
and 1 more
#VU33290 - Security Features
CVE-2015-1793		 CWE-254 Medium
No
No
 - 09.07.2015 SB2015070905
SB2015070906
SB2015070907
and 5 more
#VU33826 - Improper input validation
CVE-2015-4620		 CWE-20 Medium
No
No
 - 08.07.2015 SB2015070810
SB2015070811
SB2015080404
and 5 more
#VU32436 - Memory corruption
CVE-2014-9679		 CWE-119 Medium
No
No
 - 19.02.2015 SB2015021903
SB2015031807
SB2015070723
and 2 more
#VU32556 - Stack-based buffer overflow
CVE-2014-2015		 CWE-121 Medium
No
No
 - 02.11.2014 SB2014110204
SB2014030401
SB2015081707
and 1 more
#VU32505 - Exposure of sensitive information to an unauthorized actor
CVE-2014-5270		 CWE-200 Low
No
No
 - 10.10.2014 SB2014101003
SB2014082102
SB2015080406
and 1 more


Showing elements 3441 - 3460 out of 3943