Known vulnerabilities in Amazon Linux AMI - page 33

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 - 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72574 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48338		 CWE-78 Low
No
No
 - 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 14 more
#VU72573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48337		 CWE-78 High
No
No
 - 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 42 more
#VU72572 - UNIX Symbolic Link (Symlink) Following
CVE-2022-3560		 CWE-61 Low
No
No
 - 26.02.2023 SB2023022602
SB2023022604
SB2023030634
and 16 more
#VU72079 - Resource Management Errors
CVE-2022-44267		 CWE-399 Low
Available
No
 - 09.02.2023 SB2023020911
SB2023021005
SB2023021560
and 16 more
#VU72078 - Exposure of sensitive information to an unauthorized actor
CVE-2022-44268		 CWE-200 Medium
Available
No
 - 09.02.2023 SB2023020911
SB2023021005
SB2023021560
and 16 more
#VU71342 - Improper input validation
CVE-2023-0414		 CWE-20 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023011810
SB20240806345
and 1 more
#VU71341 - Missing release of memory after effective lifetime
CVE-2023-0417		 CWE-401 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71340 - Improper input validation
CVE-2023-0413		 CWE-20 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71339 - Improper input validation
CVE-2023-0416		 CWE-20 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71338 - Improper input validation
CVE-2023-0415		 CWE-20 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71337 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-0411		 CWE-835 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71335 - Improper input validation
CVE-2023-0412		 CWE-20 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU69913 - Heap-based Buffer Overflow
CVE-2022-38533		 CWE-122 Low
No
No
 - 05.12.2022 SB2022120549
SB2022120601
SB2022120603
and 12 more
#VU67659 - Use After Free
CVE-2022-3297		 CWE-416 High
No
No
 - 26.09.2022 SB2022092685
SB2022112963
SB2022122715
and 19 more
#VU67658 - Memory corruption
CVE-2022-3296		 CWE-119 High
No
No
 - 26.09.2022 SB2022092684
SB2022092686
SB2022112963
and 16 more
#VU67627 - Use After Free
CVE-2022-3256		 CWE-416 High
No
No
 - 24.09.2022 SB2022092409
SB2022092410
SB2022121302
and 14 more
#VU67626 - NULL Pointer Dereference
CVE-2022-3278		 CWE-476 Low
No
No
 - 24.09.2022 SB2022092408
SB2022112963
SB2022122715
and 18 more
#VU67625 - Use After Free
CVE-2022-3235		 CWE-416 High
No
No
 - 24.09.2022 SB2022092407
SB2022112963
SB2022122715
and 17 more
#VU67435 - Heap-based Buffer Overflow
CVE-2022-3234		 CWE-122 High
No
No
 - 18.09.2022 SB2022091802
SB2022091803
SB2022112963
and 18 more


Showing elements 641 - 660 out of 3943