Known vulnerabilities in Amazon Linux AMI - page 63

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66592 - Security Features
CVE-2022-21505		 CWE-254 Low
No
No
 - 17.08.2022 SB2022081738
SB2022081742
SB2022081744
and 14 more
#VU66591 - Out-of-bounds read
CVE-2022-1462		 CWE-125 Low
No
No
 - 17.08.2022 SB2022081737
SB2022081739
SB2022081740
and 49 more
#VU65642 - Memory corruption
CVE-2022-2078		 CWE-119 Low
Available
No
 - 21.07.2022 SB2022072112
SB2022072123
SB2022082923
and 16 more
#VU65641 - Use After Free
CVE-2022-1973		 CWE-416 Low
No
No
 - 21.07.2022 SB2022072112
SB2022072123
SB2022082923
and 8 more
#VU65219 - Type confusion
CVE-2022-23816		 CWE-843 Low
No
No
 - 12.07.2022 SB2022071264
SB2022071302
SB2022071617
and 39 more
#VU65204 - Type confusion
CVE-2022-23825		 CWE-843 Low
No
No
 - 12.07.2022 SB2022071249
SB2022071256
SB2022071302
and 39 more
#VU65007 - Processor optimization removal or modification of security-critical code
CVE-2022-23960		 CWE-1037 Low
No
No
 - 07.07.2022 SB2022031310
SB2022070743
SB2022072819
and 26 more
#VU64861 - Use After Free
CVE-2022-1679		 CWE-416 Low
No
No
 - 02.07.2022 SB2022070218
SB2022070221
SB2022070717
and 82 more
#VU64364 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21123		 CWE-200 Low
No
No
 - 14.06.2022 SB2022061454
SB2022061465
SB2022061463
and 97 more
#VU64365 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21125		 CWE-200 Low
No
No
 - 14.06.2022 SB2022061454
SB2022061467
SB2022061463
and 96 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166		 CWE-200 Low
No
No
 - 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU64262 - NULL Pointer Dereference
CVE-2022-1852		 CWE-476 Low
No
No
 - 14.06.2022 SB2022061417
SB2022072123
SB2022082923
and 21 more
#VU64261 - NULL Pointer Dereference
CVE-2022-1789		 CWE-476 Low
No
No
 - 14.06.2022 SB2022061417
SB2022071353
SB2022071420
and 25 more
#VU64156 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-1729		 CWE-362 Low
No
No
 - 10.06.2022 SB2022061213
SB2022061417
SB2022061630
and 79 more
#VU64073 - Out-of-bounds write
CVE-2022-1972		 CWE-787 Low
Available
No
 - 08.06.2022 SB2022060824
SB2022060825
SB2022060826
and 15 more
#VU64070 - Use After Free
CVE-2022-1966		 CWE-416 Low
Available
No
 - 08.06.2022 SB2022060822
SB2022060823
SB2022060824
and 44 more
#VU63388 - Exposure of sensitive information to an unauthorized actor
CVE-2022-1353		 CWE-200 Low
No
No
 - 18.05.2022 SB2022060826
SB2022060828
SB2022061213
and 58 more
#VU63315 - Release of invalid pointer or reference
CVE-2022-24958		 CWE-763 Low
No
No
 - 17.05.2022 SB2022051728
SB2022060824
SB2022060828
and 15 more
#VU61271 - Heap-based Buffer Overflow
CVE-2022-25636		 CWE-122 Low
Available
No
 - 13.03.2022 SB2022031307
SB2022031308
SB2022031401
and 26 more
#VU59896 - Permissions, Privileges, and Access Controls
CVE-2022-23222		 CWE-264 Low
Available
No
 - 20.01.2022 SB2022012050
SB2022061414
SB2022032233
and 22 more


Showing elements 1241 - 1260 out of 3943