Known vulnerabilities in Amazon Linux AMI - page 39

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70788 - Integer overflow
CVE-2022-31631		 CWE-190 Medium
No
No
 - 07.01.2023 SB2023010702
SB2023010704
SB2023011201
and 21 more
#VU70457 - Security Features
CVE-2022-43551		 CWE-254 Medium
No
No
 - 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548		 CWE-350 Medium
No
No
 - 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU68886 - Out-of-bounds read
CVE-2022-31630		 CWE-125 Medium
No
No
 - 01.11.2022 SB2022110119
SB2022110336
SB2022110814
and 21 more
#VU68749 - Cleartext Transmission of Sensitive Information
CVE-2022-42916		 CWE-319 Medium
No
No
 - 26.10.2022 SB2022102624
SB2022102662
SB2022102703
and 27 more
#VU68748 - Double Free
CVE-2022-42915		 CWE-415 Medium
No
No
 - 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 26 more
#VU68747 - Stack-based buffer overflow
CVE-2022-35260		 CWE-121 Low
No
No
 - 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 17 more
#VU68746 - Expected Behavior Violation
CVE-2022-32221		 CWE-440 Medium
No
No
 - 26.10.2022 SB2022102624
SB2022102643
SB2022102644
and 58 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256		 CWE-444 Medium
No
No
 - 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU67849 - Use of Insufficiently Random Values
CVE-2022-35255		 CWE-330 Medium
No
No
 - 03.10.2022 SB2022100401
SB2022100402
SB2022100528
and 40 more
#VU67756 - Security Features
CVE-2022-31629		 CWE-254 Low
Available
No
 - 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 49 more
#VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-31628		 CWE-835 Medium
No
No
 - 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 26 more
#VU67527 - Out-of-bounds read
CVE-2022-31212		 CWE-125 Low
Available
No
 - 21.09.2022 SB2022092105
SB2022092109
SB2022102081
and 4 more
#VU65292 - Heap-based Buffer Overflow
CVE-2022-31627		 CWE-122 High
No
No
 - 14.07.2022 SB2022071404
SB2022071405
SB2022072549
and 5 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207		 CWE-276 Low
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU64681 - Resource exhaustion
CVE-2022-32205		 CWE-400 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 32 more
#VU63011 - Cleartext Transmission of Sensitive Information
CVE-2022-30115		 CWE-319 Low
No
No
 - 11.05.2022 SB2022051112
SB2022051170
SB2022072605
and 11 more
#VU63007 - Improper input validation
CVE-2022-27780		 CWE-20 Low
No
No
 - 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 14 more
#VU63005 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27779		 CWE-200 Low
No
No
 - 11.05.2022 SB2022051112
SB2022051170
SB2022072605
and 9 more
#VU62643 - Resource Management Errors
CVE-2022-27775		 CWE-399 Low
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 30 more


Showing elements 761 - 780 out of 3943