Known vulnerabilities in Amazon Linux AMI - page 49

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU92383 - Out-of-bounds read
CVE-2023-46045		 CWE-125 Low
No
No
 - 20.06.2024 SB20240620103
SB20240620105
SB20240620106
and 4 more
#VU86755 - Out-of-bounds write
CVE-2023-52356		 CWE-787 High
No
No
 - 23.02.2024 SB2024022315
SB2024022316
SB2024022317
and 35 more
#VU86707 - Server-Side Request Forgery (SSRF)
CVE-2024-24806		 CWE-918 Medium
No
No
 - 22.02.2024 SB2024022210
SB2024022214
SB2024022225
and 54 more
#VU86276 - Incorrect Default Permissions
CVE-2024-24821		 CWE-276 Low
No
No
 - 08.02.2024 SB2024020870
SB2024021508
SB2024022241
and 3 more
#VU86231 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2023-52426		 CWE-776 Medium
No
No
 - 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 23 more
#VU86202 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24575		 CWE-835 Medium
No
No
 - 07.02.2024 SB2024020715
SB2024020801
SB2024020863
and 15 more
#VU86201 - Heap-based Buffer Overflow
CVE-2024-24577		 CWE-122 High
No
No
 - 07.02.2024 SB2024020715
SB2024020801
SB2024020863
and 29 more
#VU85583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-49569		 CWE-22 Medium
No
No
 - 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 42 more
#VU85582 - Resource exhaustion
CVE-2023-49568		 CWE-400 Medium
No
No
 - 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 37 more
#VU85452 - Heap-based Buffer Overflow
CVE-2024-21886		 CWE-122 Low
No
No
 - 16.01.2024 SB2024011648
SB2024011649
SB2024011650
and 42 more
#VU85451 - Heap-based Buffer Overflow
CVE-2024-21885		 CWE-122 Low
No
No
 - 16.01.2024 SB2024011648
SB2024011649
SB2024011650
and 42 more
#VU85450 - Resource Management Errors
CVE-2024-0409		 CWE-399 Low
No
No
 - 16.01.2024 SB2024011648
SB2024011649
SB2024011650
and 33 more
#VU85449 - Improper input validation
CVE-2024-0408		 CWE-20 Low
No
No
 - 16.01.2024 SB2024011648
SB2024011649
SB2024011650
and 32 more
#VU85448 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-0229		 CWE-362 Low
No
No
 - 16.01.2024 SB2024011648
SB2024011649
SB2024011650
and 44 more
#VU84568 - Observable discrepancy
CVE-2023-6135		 CWE-203 Medium
No
No
 - 19.12.2023 SB2023121946
SB2023122118
SB2024010201
and 33 more
#VU83626 - Out-of-bounds write
CVE-2020-21679		 CWE-787 High
No
No
 - 03.12.2023 SB2023120302
SB2023120304
SB20231110111
and 7 more
#VU66142 - Use After Free
CVE-2021-42779		 CWE-416 Low
No
No
 - 05.08.2022 SB2022080536
SB2022090706
SB2021102923
and 3 more
#VU63956 - Stack-based buffer overflow
CVE-2022-27239		 CWE-121 Low
No
No
 - 02.06.2022 SB2022042911
SB2022060218
SB2022060832
and 16 more
#VU63947 - Memory corruption
CVE-2022-1270		 CWE-119 High
No
No
 - 02.06.2022 SB2022060208
SB2022092951
SB2022112601
and 6 more
#VU62702 - Exposure of sensitive information to an unauthorized actor
CVE-2022-29869		 CWE-200 Medium
No
No
 - 29.04.2022 SB2022042911
SB2022060218
SB2022060832
and 10 more


Showing elements 961 - 980 out of 3943