Known vulnerabilities in Amazon Linux AMI - page 68

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71754 - Integer overflow
CVE-2022-25147		 CWE-190 High
No
No
 - 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 49 more
#VU71239 - Integer overflow
CVE-2022-23521		 CWE-190 High
No
No
 - 17.01.2023 SB2023011739
SB2023011741
SB2023011804
and 52 more
#VU71238 - Heap-based Buffer Overflow
CVE-2022-41903		 CWE-122 High
No
No
 - 17.01.2023 SB2023011739
SB2023011741
SB2023011804
and 51 more
#VU69401 - Release of invalid pointer or reference
CVE-2022-2521		 CWE-763 Medium
No
No
 - 17.11.2022 SB2022111718
SB2022111719
SB2023010512
and 21 more
#VU68820 - Out-of-bounds read
CVE-2022-2953		 CWE-125 Medium
No
No
 - 28.10.2022 SB2022102808
SB2022111719
SB2023011256
and 18 more
#VU68518 - Heap-based Buffer Overflow
CVE-2022-39260		 CWE-122 High
No
No
 - 19.10.2022 SB2022101995
SB2022101996
SB2022101997
and 23 more
#VU67140 - Out-of-bounds read
CVE-2022-2868		 CWE-125 Low
No
No
 - 09.09.2022 SB2022090904
SB2022090905
SB2022111719
and 23 more
#VU65287 - Permissions, Privileges, and Access Controls
CVE-2022-29187		 CWE-264 Medium
No
No
 - 13.07.2022 SB2022071347
SB2022071348
SB2022071350
and 30 more
#VU62693 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24735		 CWE-94 Medium
No
No
 - 29.04.2022 SB2022042901
SB2022060701
SB2022071948
and 14 more
#VU62692 - NULL Pointer Dereference
CVE-2022-24736		 CWE-476 Medium
No
No
 - 29.04.2022 SB2022042901
SB2022060701
SB2022092953
and 15 more
#VU62258 - Untrusted Search Path
CVE-2022-24765		 CWE-426 Low
No
No
 - 12.04.2022 SB2022041262
SB2022041264
SB2022041265
and 44 more
#VU61295 - Memory corruption
CVE-2022-23219		 CWE-119 High
No
No
 - 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 51 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407		 CWE-89 High
No
No
 - 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60079 - Permissions, Privileges, and Access Controls
CVE-2022-23181		 CWE-264 Low
No
No
 - 27.01.2022 SB2022012708
SB2022030854
SB2022041951
and 25 more
#VU59646 - Integer overflow
CVE-2022-22823		 CWE-190 High
No
No
 - 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59645 - Integer overflow
CVE-2022-22822		 CWE-190 High
No
No
 - 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 59 more
#VU59643 - Integer overflow
CVE-2021-46143		 CWE-190 High
No
No
 - 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 58 more
#VU59642 - Resource exhaustion
CVE-2021-45960		 CWE-400 Medium
No
No
 - 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037		 CWE-444 Medium
No
No
 - 29.07.2021 SB2021072907
SB2021080807
SB2021080808
and 30 more
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484		 CWE-502 High
Available
No
 - 21.05.2020 SB2020052124
SB2020052501
SB2020053102
and 47 more


Showing elements 1341 - 1360 out of 3943