Known vulnerabilities in Amazon Linux AMI - page 176

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34851 - Stack-based buffer overflow
CVE-2015-0242		 CWE-121 High
No
No
 - 27.01.2020 SB2020012740
SB2015031303
SB2015071802
and 1 more
#VU30418 - Information Exposure Through an Error Message
CVE-2014-8161		 CWE-209 Low
No
No
 - 27.01.2020 SB2020012730
SB2015041613
SB2015031303
and 2 more
#VU30420 - Improper Control of Generation of Code ('Code Injection')
CVE-2015-0241		 CWE-94 High
No
No
 - 27.01.2020 SB2020012730
SB2015041613
SB2015031303
and 2 more
#VU30421 - Improper Control of Generation of Code ('Code Injection')
CVE-2015-0243		 CWE-94 High
No
No
 - 27.01.2020 SB2020012730
SB2015041613
SB2015031303
and 3 more
#VU30422 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-0244		 CWE-89 High
No
No
 - 27.01.2020 SB2020012730
SB2015041613
SB2015031303
and 3 more
#VU16104 - Improper input validation
CVE-2015-0232		 CWE-20 High
No
No
 - 27.11.2018 SB2015021701
SB2015021101
SB2015021102
and 2 more
#VU16102 - Out-of-bounds read
CVE-2014-9427		 CWE-125 Low
No
No
 - 27.11.2018 SB2015021701
SB2015021101
SB2015021102
and 2 more
#VU16100 - Use After Free
CVE-2014-8142		 CWE-416 High
Available
No
 - 27.11.2018 SB2015021701
SB2015021101
SB2015021102
and 4 more
#VU11823 - Command injection
CVE-2014-7844		 CWE-77 Low
No
No
 - 13.04.2018 SB2015010701
SB2015092636
SB2015092637
and 8 more
#VU11822 - Command injection
CVE-2004-2771		 CWE-77 Low
No
No
 - 13.04.2018 SB2015092636
SB2015092637
SB2018040807
and 8 more
#VU31833 - Resource Management Errors
CVE-2015-1349		 CWE-399 Medium
No
No
 - 19.02.2015 SB2015021902
SB2015070811
SB2015061523
and 3 more
#VU32443 - Heap-based Buffer Overflow
CVE-2015-0247		 CWE-122 Medium
No
No
 - 17.02.2015 SB2015021702
SB2015031106
SB2015061608
and 3 more
#VU32441 - Memory corruption
CVE-2014-9328		 CWE-119 Medium
No
No
 - 03.02.2015 SB2015020301
SB2015031205
SB2015021704
and 5 more
#VU33267 - Stack-based buffer overflow
CVE-2014-8158		 CWE-121 Medium
No
No
 - 26.01.2015 SB2015012605
SB2015092106
SB2015021106
and 6 more
#VU33266 - Heap-based Buffer Overflow
CVE-2014-8157		 CWE-122 Medium
No
No
 - 26.01.2015 SB2015012604
SB2015092105
SB2015021106
and 6 more
#VU40931 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-1191		 CWE-22 Medium
No
No
 - 21.01.2015 SB2015012105
SB2015040108
SB2015013102
and 2 more
#VU33250 - Improper input validation
CVE-2014-8137		 CWE-20 Medium
No
No
 - 24.12.2014 SB2014122401
SB2015092102
SB2015010803
and 6 more
#VU33057 - Improper input validation
CVE-2014-9130		 CWE-20 Medium
No
No
 - 08.12.2014 SB2015012904
SB2015021104
SB2015021105
and 8 more
#VU33058 - Use of Externally-Controlled Format String
CVE-2014-9157		 CWE-134 Medium
No
No
 - 03.12.2014 SB2015012709
SB2015030401
SB2015030402
and 1 more
#VU41879 - Permissions, Privileges, and Access Controls
CVE-2014-0067		 CWE-264 Medium
No
No
 - 31.03.2014 SB2015031303


Showing elements 3501 - 3520 out of 3943