Known vulnerabilities in Amazon Linux AMI - page 20

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91620 - Missing release of memory after effective lifetime
CVE-2023-52746		 CWE-401 Low
No
No
 - 10.06.2024 -
#VU86248 - Missing release of memory after effective lifetime
CVE-2023-7192		 CWE-401 Low
No
No
 - 08.02.2024 -
#VU84354 - Out-of-bounds write
CVE-2023-45863		 CWE-787 Low
No
No
 - 12.12.2023 -
#VU78785 - NULL Pointer Dereference
CVE-2023-3359		 CWE-476 Low
No
No
 - 31.07.2023 -
#VU77956 - Incorrect Calculation
CVE-2023-3161		 CWE-682 Low
No
No
 - 04.07.2023 -
#VU77495 - Use After Free
CVE-2023-2985		 CWE-416 Low
No
No
 - 17.06.2023 -
#VU75454 - Security Features
CVE-2023-1998		 CWE-254 Low
Available
No
 - 24.04.2023 -
#VU75448 - Use After Free
CVE-2023-1829		 CWE-416 Low
Available
No
 - 24.04.2023 -
#VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28487		 CWE-78 Low
No
No
 - 30.03.2023 -
#VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28486		 CWE-78 Low
No
No
 - 30.03.2023 -
#VU74054 - Out-of-bounds write
CVE-2023-1078		 CWE-787 Low
No
No
 - 27.03.2023 -
#VU74003 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-27985		 CWE-78 High
No
No
 - 24.03.2023 -
#VU74002 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-27986		 CWE-94 High
No
No
 - 24.03.2023 -
#VU73267 - Double Free
CVE-2023-1032		 CWE-415 Low
No
No
 - 13.03.2023 -
#VU72742 - Type confusion
CVE-2023-1076		 CWE-843 Low
No
No
 - 03.03.2023 -
#VU72734 - Use After Free
CVE-2023-1118		 CWE-416 Low
No
No
 - 03.03.2023 -
#VU72719 - Double Free
CVE-2023-27320		 CWE-415 Low
No
No
 - 02.03.2023 -
#VU72470 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2022-27672		 CWE-1342 Low
No
No
 - 21.02.2023 -
#VU72167 - Out-of-bounds write
CVE-2023-0568		 CWE-787 Medium
No
No
 - 14.02.2023 -
#VU72166 - Use of Insufficiently Random Values
CVE-2023-0567		 CWE-330 Medium
No
No
 - 14.02.2023 -


Showing elements 381 - 400 out of 3943