Known vulnerabilities in Amazon Linux AMI - page 22
Vendor:
Amazon Web Services
Software:
Amazon Linux AMI
Software CPE:
cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website:
https://aws.amazon.com/
Total vulnerabilities:
3943
Public exploits:
290
Known exploited (KEV):
53
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
Vulnerabilities (3943)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72572 - UNIX Symbolic Link (Symlink) Following CVE-2022-3560 |
CWE-61 | Low | - | 26.02.2023 | - | ||
| #VU72336 - Cleartext Transmission of Sensitive Information CVE-2023-23915 |
CWE-319 | Medium | - | 16.02.2023 | - | ||
| #VU72335 - Cleartext Transmission of Sensitive Information CVE-2023-23914 |
CWE-319 | Medium | - | 16.02.2023 | - | ||
| #VU72050 - Improper input validation CVE-2023-25193 |
CWE-20 | Medium | - | 08.02.2023 | - | ||
| #VU71458 - Memory corruption CVE-2023-22745 |
CWE-119 | High | - | 24.01.2023 | - | ||
| #VU71341 - Missing release of memory after effective lifetime CVE-2023-0417 |
CWE-401 | Medium | - | 19.01.2023 | - | ||
| #VU71339 - Improper input validation CVE-2023-0416 |
CWE-20 | Medium | - | 19.01.2023 | - | ||
| #VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-37436 |
CWE-113 | Medium | - | 17.01.2023 | - | ||
| #VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-36760 |
CWE-444 | Medium | - | 17.01.2023 | - | ||
| #VU71241 - Memory corruption CVE-2006-20001 |
CWE-119 | Medium | - | 17.01.2023 | - | ||
| #VU69913 - Heap-based Buffer Overflow CVE-2022-38533 |
CWE-122 | Low | - | 05.12.2022 | - | ||
| #VU68963 - Use After Free CVE-2022-3352 |
CWE-416 | High | - | 03.11.2022 | - | ||
| #VU67760 - Type conversion CVE-2020-10735 |
CWE-704 | Medium | - | 29.09.2022 | - | ||
| #VU67717 - UNIX Symbolic Link (Symlink) Following CVE-2022-36113 |
CWE-61 | Low | - | 28.09.2022 | - | ||
| #VU67659 - Use After Free CVE-2022-3297 |
CWE-416 | High | - | 26.09.2022 | - | ||
| #VU67658 - Memory corruption CVE-2022-3296 |
CWE-119 | High | - | 26.09.2022 | - | ||
| #VU67626 - NULL Pointer Dereference CVE-2022-3278 |
CWE-476 | Low | - | 24.09.2022 | - | ||
| #VU67625 - Use After Free CVE-2022-3235 |
CWE-416 | High | - | 24.09.2022 | - | ||
| #VU67435 - Heap-based Buffer Overflow CVE-2022-3234 |
CWE-122 | High | - | 18.09.2022 | - | ||
| #VU65442 - Integer overflow CVE-2022-33068 |
CWE-190 | Medium | - | 19.07.2022 | - |
Showing elements 421 - 440 out of 3943