Known vulnerabilities in Amazon Linux AMI - page 33

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88537 - Double Free
CVE-2024-2002		 CWE-415 Medium
No
No
 - 15.04.2024 SB2024041549
SB2024041551
SB2024041555
and 6 more
#VU88116 - Heap-based Buffer Overflow
CVE-2024-31081		 CWE-122 Low
No
No
 - 04.04.2024 SB2024040412
SB2024040418
SB2024040419
and 45 more
#VU88115 - Heap-based Buffer Overflow
CVE-2024-31080		 CWE-122 Low
No
No
 - 04.04.2024 SB2024040412
SB2024040418
SB2024040419
and 46 more
#VU88102 - Integer overflow
CVE-2024-23307		 CWE-190 Low
No
No
 - 03.04.2024 SB2024040369
SB2024040376
SB2024040377
and 170 more
#VU87807 - Use of Potentially Dangerous Function
CVE-2024-30202		 CWE-676 High
No
No
 - 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 6 more
#VU87680 - Uncontrolled Recursion
CVE-2024-25111		 CWE-674 Medium
No
No
 - 20.03.2024 SB2024032067
SB2024032078
SB2024032634
and 24 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 - 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 72 more
#VU86939 - Use After Free
CVE-2024-1454		 CWE-416 Low
No
No
 - 01.03.2024 SB2024030116
SB2024030747
SB2024030748
and 3 more
#VU86937 - Cryptographic Issues
CVE-2023-5992		 CWE-310 Low
No
No
 - 01.03.2024 SB2024030116
SB2024030119
SB2024030120
and 13 more
#VU86721 - Improper input validation
CVE-2024-22019		 CWE-20 Medium
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 48 more
#VU85927 - Improper Check for Certificate Revocation
CVE-2024-0853		 CWE-299 Low
No
No
 - 31.01.2024 SB2024013108
SB2024020838
SB2024032231
and 10 more
#VU85722 - Expired pointer dereference
CVE-2024-23638		 CWE-825 Medium
No
No
 - 23.01.2024 SB2024012343
SB2024020237
SB2024020238
and 14 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385		 CWE-78 Medium
Available
No
 - 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU83627 - Use After Free
CVE-2023-49288		 CWE-416 Medium
No
No
 - 03.12.2023 SB2023090612
SB2023122042
SB2023122043
and 5 more
#VU82316 - Improper Handling of Structural Elements
CVE-2023-5824		 CWE-237 Medium
No
No
 - 24.10.2023 SB2023102416
SB2023110745
SB2023110746
and 21 more
#VU79523 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35939		 CWE-59 Low
No
No
 - 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 - 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938		 CWE-59 Low
No
No
 - 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU31245 - Improper Link Resolution Before File Access ('Link Following')
CVE-2017-7500		 CWE-59 Low
No
No
 - 13.08.2018 SB2018081318
SB2018102434
SB2018080623
and 14 more
#VU31396 - Improper Link Resolution Before File Access ('Link Following')
CVE-2017-7501		 CWE-59 Low
No
No
 - 22.11.2017 SB2017112213
SB2018102434
SB2022110933
and 13 more


Showing elements 641 - 660 out of 3943