Known vulnerabilities in Amazon Linux AMI - page 61

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87207 - Heap-based Buffer Overflow
CVE-2022-28506		 CWE-122 High
No
No
 - 07.03.2024 SB2024030740
SB2024030741
SB2022062452
and 9 more
#VU65639 - Out-of-bounds write
CVE-2022-27404		 CWE-787 High
No
No
 - 21.07.2022 SB2022072115
SB2022072116
SB2022072122
and 48 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64088 - Out-of-bounds read
CVE-2022-30556		 CWE-125 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64086 - Resource exhaustion
CVE-2022-30522		 CWE-400 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061723
and 31 more
#VU64085 - Improper input validation
CVE-2022-29404		 CWE-20 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 30 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64080 - Out-of-bounds read
CVE-2022-28330		 CWE-125 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022070730
and 11 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Available
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU63747 - Improper Authorization
CVE-2022-26691		 CWE-285 High
No
No
 - 26.05.2022 SB2022052625
SB2022052626
SB2022053018
and 30 more
#VU61394 - UNIX Symbolic Link (Symlink) Following
CVE-2021-31566		 CWE-61 Low
No
No
 - 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 27 more
#VU61287 - Improper input validation
CVE-2022-22719		 CWE-20 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 32 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU61284 - Out-of-bounds write
CVE-2022-23943		 CWE-787 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU59459 - Use After Free
CVE-2021-36976		 CWE-416 Medium
No
No
 - 11.01.2022 SB2021072064
SB2022011140
SB2022031433
and 13 more
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224		 CWE-918 Medium
No
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Available
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU47741 - Heap-based Buffer Overflow
CVE-2020-15999		 CWE-122 Critical
Available
Exploited
 - 20.10.2020 SB2020102038
SB2020102039
SB2020102040
and 43 more


Showing elements 1201 - 1220 out of 3943