Known vulnerabilities in Amazon Linux AMI - page 4

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91368 - Exposure of sensitive information to an unauthorized actor
CVE-2023-52481		 CWE-200 Low
No
No
 - 08.06.2024 SB2024060891
SB20240711212
SB20240711213
and 6 more
#VU89393 - Use of Uninitialized Resource
CVE-2023-52477		 CWE-908 Low
No
No
 - 13.05.2024 SB2024051343
SB2024051353
SB2024062412
and 47 more
#VU89387 - Resource Management Errors
CVE-2023-52522		 CWE-399 Low
No
No
 - 13.05.2024 SB2024051336
SB2024051357
SB2024070866
and 27 more
#VU88821 - Out-of-bounds read
CVE-2023-52476		 CWE-125 Low
No
No
 - 18.04.2024 SB2024041854
SB2024050854
SB2024050855
and 39 more
#VU82976 - Out-of-bounds write
CVE-2023-43361		 CWE-787 High
No
No
 - 10.11.2023 SB2023111036
SB2023111044
SB2023111047
and 9 more
#VU82975 - Out-of-bounds read
CVE-2023-4535		 CWE-125 Low
No
No
 - 10.11.2023 SB2023111035
SB2023121455
SB2023121456
and 3 more
#VU82974 - Memory corruption
CVE-2023-40661		 CWE-119 Low
No
No
 - 10.11.2023 SB2023111035
SB2023111041
SB2023111042
and 11 more
#VU82973 - Improper Authorization
CVE-2023-40660		 CWE-285 Low
No
No
 - 10.11.2023 SB2023111035
SB2023111042
SB2023111043
and 12 more
#VU82763 - Improper input validation
CVE-2023-39191		 CWE-20 Low
No
No
 - 06.11.2023 SB2023110651
SB2023110658
SB2023110669
and 11 more
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143		 CWE-200 Medium
No
No
 - 17.10.2023 SB2023101702
SB2023101703
SB2023101801
and 31 more
#VU81964 - Improper input validation
CVE-2023-39323		 CWE-20 Medium
No
No
 - 12.10.2023 SB2023101258
SB2023101259
SB2023101260
and 38 more
#VU81900 - Deadlock
CVE-2023-34324		 CWE-833 Medium
No
No
 - 11.10.2023 SB2023101154
SB2023101193
SB2023110145
and 37 more
#VU81875 - Improper Authorization
CVE-2023-3961		 CWE-285 High
No
No
 - 11.10.2023 SB2023101133
SB2023101137
SB2023101155
and 28 more
#VU81872 - Permissions, Privileges, and Access Controls
CVE-2023-4091		 CWE-264 Low
No
No
 - 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 42 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546		 CWE-73 Low
No
No
 - 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 - 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 - 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217		 CWE-122 Critical
Available
Exploited
 - 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more
#VU80879 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-37460		 CWE-22 High
No
No
 - 19.09.2023 SB2023091914
SB2023110849
SB2023112320
and 10 more


Showing elements 61 - 80 out of 3943