Known vulnerabilities in Amazon Linux AMI - page 56

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91288 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32465		 CWE-94 High
No
No
 - 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91287 - UNIX Symbolic Link (Symlink) Following
CVE-2024-32021		 CWE-61 Medium
No
No
 - 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91286 - UNIX Hard Link
CVE-2024-32020		 CWE-62 Medium
No
No
 - 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 43 more
#VU89490 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32004		 CWE-94 High
No
No
 - 15.05.2024 SB2024051503
SB2024060720
SB2024060721
and 51 more
#VU89361 - Resource Management Errors
CVE-2024-33655		 CWE-399 Medium
No
No
 - 12.05.2024 SB2024051202
SB2024051203
SB2024051204
and 9 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 - 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU88118 - Use After Free
CVE-2024-31083		 CWE-416 Low
No
No
 - 04.04.2024 SB2024040412
SB2024040418
SB2024040419
and 48 more
#VU87901 - Stack-based buffer overflow
CVE-2023-52628		 CWE-121 Low
No
No
 - 28.03.2024 SB2024032825
SB2024051408
SB2024061136
and 40 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597		 CWE-61 Low
No
No
 - 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU86885 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48624		 CWE-78 Medium
No
No
 - 28.02.2024 SB2024022820
SB2024022839
SB2024030503
and 60 more
#VU86577 - Use After Free
CVE-2024-1086		 CWE-416 High
Available
Exploited
 - 19.02.2024 SB2024021923
SB2024021925
SB2024021926
and 116 more
#VU85840 - Out-of-bounds write
CVE-2023-6040		 CWE-787 Low
No
No
 - 26.01.2024 SB2024012632
SB2024012637
SB2024012639
and 36 more
#VU85583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-49569		 CWE-22 Medium
No
No
 - 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 42 more
#VU85068 - Resource exhaustion
CVE-2023-6277		 CWE-400 Medium
No
No
 - 08.01.2024 SB2024010834
SB2024010841
SB2024010842
and 14 more
#VU85021 - Out-of-bounds write
CVE-2023-6931		 CWE-787 Low
No
No
 - 05.01.2024 SB2024010524
SB2024011643
SB2024011644
and 99 more
#VU84727 - Command injection
CVE-2023-51764		 CWE-77 Medium
Available
No
 - 24.12.2023 SB2023122403
SB2023122615
SB2023122811
and 11 more
#VU22020 - Improper input validation
CVE-2019-17596		 CWE-20 Medium
No
No
 - 21.10.2019 SB2019102201
SB2019102202
SB2019102107
and 14 more
#VU38433 - Out-of-bounds read
CVE-2017-13139		 CWE-125 High
No
No
 - 23.08.2017 SB2017072302
SB2024031953
#VU32210 - Integer overflow
CVE-2016-5841		 CWE-190 High
No
No
 - 13.12.2016 SB2016121363
SB2016091521
SB2024031953
#VU33721 - Improper input validation
CVE-2015-1197		 CWE-20 Low
No
No
 - 19.02.2015 SB2015021904
SB2015121002
SB2015021503
and 6 more


Showing elements 1101 - 1120 out of 3943