Known vulnerabilities in Amazon Linux AMI - page 52

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU92195 - NULL Pointer Dereference
CVE-2023-45918		 CWE-476 Medium
No
No
 - 18.06.2024 SB2024061808
SB2024061809
SB2024080107
and 5 more
#VU87495 - Protection Mechanism Failure
CVE-2023-39368		 CWE-693 Medium
No
No
 - 13.03.2024 SB2024031327
SB2024031439
SB2024032236
and 6 more
#VU87490 - Exposure of sensitive information to an unauthorized actor
CVE-2023-38575		 CWE-200 Low
No
No
 - 13.03.2024 SB2024031315
SB2024031439
SB2024032236
and 6 more
#VU86807 - Out-of-bounds read
CVE-2024-25629		 CWE-125 Low
No
No
 - 26.02.2024 SB2024022648
SB2024030621
SB2024032954
and 38 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU86381 - Reachable Assertion
CVE-2023-5679		 CWE-617 Medium
No
No
 - 13.02.2024 SB2024021329
SB2024021330
SB2024021347
and 36 more
#VU86379 - Resource exhaustion
CVE-2023-6516		 CWE-400 Medium
No
No
 - 13.02.2024 SB2024021329
SB2024021347
SB2024021709
and 39 more
#VU86326 - NULL Pointer Dereference
CVE-2024-23327		 CWE-476 Medium
No
No
 - 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86325 - Uncaught Exception
CVE-2024-23325		 CWE-248 Medium
No
No
 - 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86324 - Improper Authentication
CVE-2024-23324		 CWE-287 High
No
No
 - 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86323 - Inefficient CPU Computation
CVE-2024-23323		 CWE-1176 Low
No
No
 - 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86322 - Use After Free
CVE-2024-23322		 CWE-416 Medium
No
No
 - 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86235 - Heap-based Buffer Overflow
CVE-2023-5841		 CWE-122 High
No
No
 - 07.02.2024 SB2024020753
SB2024020756
SB2024021705
and 15 more
#VU85654 - Security Features
CVE-2023-4001		 CWE-254 Low
No
No
 - 22.01.2024 SB2024012217
SB2024012224
SB2024012225
and 2 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385		 CWE-78 Medium
Available
No
 - 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU79523 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35939		 CWE-59 Low
No
No
 - 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 - 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938		 CWE-59 Low
No
No
 - 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU31245 - Improper Link Resolution Before File Access ('Link Following')
CVE-2017-7500		 CWE-59 Low
No
No
 - 13.08.2018 SB2018081318
SB2018102434
SB2018080623
and 14 more
#VU33721 - Improper input validation
CVE-2015-1197		 CWE-20 Low
No
No
 - 19.02.2015 SB2015021904
SB2015121002
SB2015021503
and 6 more


Showing elements 1021 - 1040 out of 3943