Known vulnerabilities in Amazon Linux AMI - page 31

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86248 - Missing release of memory after effective lifetime
CVE-2023-7192		 CWE-401 Low
No
No
 - 08.02.2024 SB2024020810
SB2024020816
SB2024021228
and 42 more
#VU84354 - Out-of-bounds write
CVE-2023-45863		 CWE-787 Low
No
No
 - 12.12.2023 SB20231212112
SB20231212116
SB20231212117
and 54 more
#VU77495 - Use After Free
CVE-2023-2985		 CWE-416 Low
No
No
 - 17.06.2023 SB2023061701
SB2023061704
SB2023061705
and 40 more
#VU75454 - Security Features
CVE-2023-1998		 CWE-254 Low
Available
No
 - 24.04.2023 SB2023042434
SB2023042440
SB2023051052
and 55 more
#VU75448 - Use After Free
CVE-2023-1829		 CWE-416 Low
Available
No
 - 24.04.2023 SB2023042427
SB2023042440
SB2023042639
and 187 more
#VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28487		 CWE-78 Low
No
No
 - 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 28 more
#VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28486		 CWE-78 Low
No
No
 - 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 31 more
#VU74003 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-27985		 CWE-78 High
No
No
 - 24.03.2023 SB2023032405
SB2023082320
SB20240806359
and 1 more
#VU74002 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-27986		 CWE-94 High
No
No
 - 24.03.2023 SB2023032405
SB2023082320
SB20240806359
#VU73267 - Double Free
CVE-2023-1032		 CWE-415 Low
No
No
 - 13.03.2023 SB2023031335
SB2023032833
SB2023041918
and 2 more
#VU73169 - Divide By Zero
CVE-2023-1127		 CWE-369 Low
No
No
 - 08.03.2023 SB2023030818
SB2023031642
SB2023031656
and 17 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522		 CWE-113 Medium
No
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU72734 - Use After Free
CVE-2023-1118		 CWE-416 Low
No
No
 - 03.03.2023 SB2023030310
SB2023031652
SB2023031653
and 92 more
#VU72719 - Double Free
CVE-2023-27320		 CWE-415 Low
No
No
 - 02.03.2023 SB2023030239
SB2023030240
SB2023033038
and 12 more
#VU72699 - Type confusion
CVE-2023-1077		 CWE-843 Low
No
No
 - 01.03.2023 SB2023030153
SB2023042440
SB2023061704
and 67 more
#VU72470 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2022-27672		 CWE-1342 Low
No
No
 - 21.02.2023 SB2023022177
SB2023022178
SB2023030943
and 31 more
#VU72167 - Out-of-bounds write
CVE-2023-0568		 CWE-787 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU72166 - Use of Insufficiently Random Values
CVE-2023-0567		 CWE-330 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 23 more
#VU72165 - Improper input validation
CVE-2023-0662		 CWE-20 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more


Showing elements 601 - 620 out of 3943