Known vulnerabilities in Amazon Linux AMI - page 193

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU43159 - Improper input validation
CVE-2012-2372		 CWE-20 Low
No
No
 - 23.01.2013 SB2013012304
SB2012070505
#VU43428 - Cryptographic Issues
CVE-2012-1150		 CWE-310 Medium
No
No
 - 06.10.2012 SB2012100601
SB2012070507
SB2012041201
and 1 more
#VU43478 - Heap-based Buffer Overflow
CVE-2011-4623		 CWE-122 Low
No
No
 - 26.09.2012 SB2012092603
SB2012070604
SB2014122404
#VU43656 - Permissions, Privileges, and Access Controls
CVE-2011-4944		 CWE-264 Low
No
No
 - 28.08.2012 SB2012082803
SB2012070507
#VU43710 - Memory corruption
CVE-2012-2102		 CWE-119 Low
No
No
 - 17.08.2012 SB2012011903
SB2012070512
#VU43726 - Out-of-bounds read
CVE-2012-2141		 CWE-125 Low
No
No
 - 15.08.2012 SB2012081513
SB2012070508
SB2014090113
#VU32771 - Resource Management Errors
CVE-2012-2655		 CWE-399 Low
No
No
 - 19.07.2012 SB2012071902
SB2012070322
SB2012070510
and 1 more
#VU43908 - Heap-based Buffer Overflow
CVE-2012-2386		 CWE-122 Medium
Available
No
 - 07.07.2012 SB2012051102
SB2012070502
SB2012070509
and 1 more
#VU43910 - Cryptographic Issues
CVE-2012-2143		 CWE-310 Medium
No
No
 - 05.07.2012 SB2012070321
SB2012070502
SB2012070509
and 4 more
#VU33114 - Resource Management Errors
CVE-2012-0876		 CWE-399 Medium
No
No
 - 03.07.2012 SB2012070308
SB2012081518
SB2012061904
and 4 more
#VU33116 - Missing release of memory after effective lifetime
CVE-2012-1148		 CWE-401 Medium
No
No
 - 03.07.2012 SB2012070310
SB2012081520
SB2012061904
and 3 more
#VU33698 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2011-4029		 CWE-362 Low
Available
No
 - 03.07.2012 SB2011112101
SB2011120204
SB2012070503
and 1 more
#VU33700 - Improper Link Resolution Before File Access ('Link Following')
CVE-2011-4028		 CWE-59 Low
No
No
 - 03.07.2012 SB2011112104
SB2011120204
SB2012070503
and 1 more
#VU32774 - Memory corruption
CVE-2012-1164		 CWE-119 Low
No
No
 - 29.06.2012 SB2012062901
SB2012081516
SB2012070504
#VU32785 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4940		 CWE-79 Low
No
No
 - 27.06.2012 SB2012062701
SB2012070324
SB2012070507
#VU32786 - Improper Authentication
CVE-2012-2122		 CWE-287 Medium
Available
No
 - 26.06.2012 SB2012062601
SB2012070205
SB2012081307
and 1 more
#VU43968 - Heap-based Buffer Overflow
CVE-2012-0219		 CWE-122 Medium
No
No
 - 21.06.2012 SB2012062102
SB2012061109
SB2012081407
and 2 more
#VU33866 - Improper input validation
CVE-2012-1820		 CWE-20 Low
No
No
 - 13.06.2012 SB2012061301
SB2012070320
SB2012061903
and 1 more
#VU44078 - Improper input validation
CVE-2011-4131		 CWE-20 Medium
No
No
 - 17.05.2012 SB2012051710
SB2012062602
SB2012070505
#VU44158 - Improper input validation
CVE-2011-5000		 CWE-20 Low
No
No
 - 05.04.2012 SB2012040502
SB2012070506


Showing elements 3841 - 3860 out of 3943