Known vulnerabilities in Amazon Linux AMI - page 59

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548		 CWE-350 Medium
No
No
 - 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU68896 - Memory corruption
CVE-2022-3786		 CWE-119 Medium
Available
No
 - 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 44 more
#VU68895 - Memory corruption
CVE-2022-3602		 CWE-119 High
Available
No
 - 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 45 more
#VU68747 - Stack-based buffer overflow
CVE-2022-35260		 CWE-121 Low
No
No
 - 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 17 more
#VU68746 - Expected Behavior Violation
CVE-2022-32221		 CWE-440 Medium
No
No
 - 26.10.2022 SB2022102624
SB2022102643
SB2022102644
and 58 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256		 CWE-444 Medium
No
No
 - 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU66881 - Improper input validation
CVE-2022-35252		 CWE-20 Medium
No
No
 - 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208		 CWE-347 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207		 CWE-276 Low
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU64682 - Resource exhaustion
CVE-2022-32206		 CWE-400 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64681 - Resource exhaustion
CVE-2022-32205		 CWE-400 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 32 more
#VU63011 - Cleartext Transmission of Sensitive Information
CVE-2022-30115		 CWE-319 Low
No
No
 - 11.05.2022 SB2022051112
SB2022051170
SB2022072605
and 11 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782		 CWE-303 Medium
No
No
 - 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU63008 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-27781		 CWE-835 Medium
No
No
 - 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 36 more
#VU63007 - Improper input validation
CVE-2022-27780		 CWE-20 Low
No
No
 - 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 14 more
#VU63005 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27779		 CWE-200 Low
No
No
 - 11.05.2022 SB2022051112
SB2022051170
SB2022072605
and 9 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776		 CWE-200 Low
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62643 - Resource Management Errors
CVE-2022-27775		 CWE-399 Low
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 30 more
#VU62641 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27774		 CWE-200 Medium
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 57 more
#VU62640 - Improper Authentication
CVE-2022-22576		 CWE-287 Medium
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more


Showing elements 1161 - 1180 out of 3943