Known vulnerabilities in Amazon Linux AMI - page 43

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84723 - Improper input validation
CVE-2023-50495		 CWE-20 Medium
No
No
 - 22.12.2023 SB2023122235
SB2023122239
SB2023122240
and 12 more
#VU84442 - Uncontrolled Recursion
CVE-2023-50269		 CWE-674 Medium
No
No
 - 15.12.2023 SB2023121502
SB2023122042
SB2023122043
and 20 more
#VU84381 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-5764		 CWE-94 Medium
No
No
 - 13.12.2023 SB2023121315
SB2023121316
SB2023121317
and 16 more
#VU84035 - Stack-based buffer overflow
CVE-2023-39804		 CWE-121 High
No
No
 - 11.12.2023 SB2023121103
SB2023121110
SB2024010972
and 16 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 - 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU83899 - Missing Encryption of Sensitive Data
CVE-2023-46219		 CWE-311 Medium
No
No
 - 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 31 more
#VU83831 - Improper input validation
CVE-2023-45866		 CWE-20 Medium
Available
No
 - 04.12.2023 SB2023120445
SB2023120701
SB2023120721
and 19 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 - 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU83447 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-46751		 CWE-611 High
No
No
 - 23.11.2023 SB20231123106
SB2023121241
SB2023121601
and 10 more
#VU83442 - Use After Free
CVE-2023-48706		 CWE-416 Low
No
No
 - 22.11.2023 SB2023112248
SB2023121468
SB2023121530
and 18 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981		 CWE-208 Medium
No
No
 - 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU82943 - Permissions, Privileges, and Access Controls
CVE-2023-5870		 CWE-264 Low
No
No
 - 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 54 more
#VU82942 - Integer overflow
CVE-2023-5869		 CWE-190 High
No
No
 - 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 70 more
#VU82941 - Exposure of sensitive information to an unauthorized actor
CVE-2023-5868		 CWE-200 Low
No
No
 - 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 53 more
#VU70721 - Out-of-bounds read
CVE-2023-0049		 CWE-125 Low
No
No
 - 05.01.2023 SB2023010521
SB2023010522
SB2023013071
and 18 more
#VU70134 - Use After Free
CVE-2022-4292		 CWE-416 High
No
No
 - 13.12.2022 SB2022121301
SB2022121303
SB2022122818
and 14 more
#VU70130 - Heap-based Buffer Overflow
CVE-2022-4141		 CWE-122 Medium
No
No
 - 13.12.2022 SB2022121301
SB2022121303
SB2022122818
and 15 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303		 CWE-190 High
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU53231 - Integer overflow
CVE-2021-32027		 CWE-190 Medium
No
No
 - 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 43 more


Showing elements 841 - 860 out of 3943