Known vulnerabilities in Amazon Linux AMI - page 2

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83903 - NULL Pointer Dereference
CVE-2023-46862		 CWE-476 Low
No
No
 - 06.12.2023 -
#VU82976 - Out-of-bounds write
CVE-2023-43361		 CWE-787 High
No
No
 - 10.11.2023 -
#VU82975 - Out-of-bounds read
CVE-2023-4535		 CWE-125 Low
No
No
 - 10.11.2023 -
#VU82974 - Memory corruption
CVE-2023-40661		 CWE-119 Low
No
No
 - 10.11.2023 -
#VU82973 - Improper Authorization
CVE-2023-40660		 CWE-285 Low
No
No
 - 10.11.2023 -
#VU82764 - Improper Access Control
CVE-2023-46813		 CWE-284 Low
Available
No
 - 06.11.2023 -
#VU82547 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46137		 CWE-444 Medium
No
No
 - 30.10.2023 -
#VU82349 - Cryptographic Issues
CVE-2023-5363		 CWE-310 Low
No
No
 - 24.10.2023 -
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853		 CWE-122 Medium
No
No
 - 23.10.2023 -
#VU82070 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39333		 CWE-94 Low
No
No
 - 17.10.2023 -
#VU82069 - Improper Validation of Integrity Check Value
CVE-2023-38552		 CWE-354 Medium
No
No
 - 17.10.2023 -
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143		 CWE-200 Medium
No
No
 - 17.10.2023 -
#VU81875 - Improper Authorization
CVE-2023-3961		 CWE-285 High
No
No
 - 11.10.2023 -
#VU81628 - Out-of-bounds read
CVE-2023-4693		 CWE-125 Low
No
No
 - 05.10.2023 -
#VU81627 - Out-of-bounds write
CVE-2023-4692		 CWE-787 Low
No
No
 - 05.10.2023 -
#VU81495 - Missing release of memory after effective lifetime
CVE-2023-5371		 CWE-401 Medium
No
No
 - 04.10.2023 -
#VU81448 - Missing release of memory after effective lifetime
CVE-2023-5156		 CWE-401 Medium
No
No
 - 03.10.2023 -
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 - 03.10.2023 -
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217		 CWE-122 Critical
Available
Exploited
 - 27.09.2023 -
#VU79377 - Improper Access Control
CVE-2023-23908		 CWE-284 Low
No
No
 - 11.08.2023 -


Showing elements 21 - 40 out of 3943