Known vulnerabilities in Amazon Linux AMI - page 45

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68895 - Memory corruption
CVE-2022-3602		 CWE-119 High
Available
No
 - 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 45 more
#VU68116 - Inadequate Encryption Strength
CVE-2022-3358		 CWE-326 Medium
Available
No
 - 11.10.2022 SB2022101132
SB2022110133
SB2022110144
and 12 more
#VU67507 - NULL Pointer Dereference
CVE-2022-2085		 CWE-476 Medium
No
No
 - 20.09.2022 SB2022092030
SB2022092732
SB2022112203
and 5 more
#VU66522 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21233		 CWE-200 Low
No
No
 - 16.08.2022 SB2022081610
SB2022081724
SB2022081725
and 20 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 - 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU63528 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0005		 CWE-200 Low
No
No
 - 23.05.2022 SB2022052313
SB2022081211
SB2022092325
and 9 more
#VU63349 - Improper Access Control
CVE-2021-33117		 CWE-284 Low
No
No
 - 17.05.2022 SB2022051745
SB2022061204
SB2022062041
and 5 more
#VU63347 - Improper input validation
CVE-2022-21136		 CWE-20 Low
No
No
 - 17.05.2022 SB2022051743
SB2022060219
SB2022081211
and 11 more
#VU63346 - Improper Access Control
CVE-2022-21131		 CWE-284 Low
No
No
 - 17.05.2022 SB2022051743
SB2022060219
SB2022081211
and 11 more
#VU62768 - Uncontrolled Memory Allocation
CVE-2022-1473		 CWE-789 Low
No
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 18 more
#VU62767 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2022-1434		 CWE-300 Low
No
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 10 more
#VU62766 - Security Features
CVE-2022-1343		 CWE-254 Medium
No
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 14 more
#VU62693 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24735		 CWE-94 Medium
No
No
 - 29.04.2022 SB2022042901
SB2022060701
SB2022071948
and 14 more
#VU62692 - NULL Pointer Dereference
CVE-2022-24736		 CWE-476 Medium
No
No
 - 29.04.2022 SB2022042901
SB2022060701
SB2022092953
and 15 more
#VU61611 - Origin Validation Error
CVE-2022-21712		 CWE-346 Low
No
No
 - 24.03.2022 SB2022032429
SB2022032438
SB2022032448
and 15 more
#VU60738 - Integer overflow
CVE-2022-25314		 CWE-190 Medium
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313		 CWE-121 High
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU60003 - Exposed Dangerous Method or Function
CVE-2022-22817		 CWE-749 High
No
No
 - 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 26 more
#VU60002 - Out-of-bounds read
CVE-2022-22816		 CWE-125 Medium
No
No
 - 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 33 more
#VU59832 - Improper input validation
CVE-2022-20698		 CWE-20 Medium
No
No
 - 19.01.2022 SB2022011924
SB2022011853
SB2022011955
and 8 more


Showing elements 881 - 900 out of 3943