Known vulnerabilities in Amazon Linux AMI - page 70

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77911 - Use After Free
CVE-2023-3111		 CWE-416 Low
No
No
 - 03.07.2023 SB2023070334
SB2023070337
SB2023071151
and 37 more
#VU77624 - Out-of-bounds read
CVE-2023-34256		 CWE-125 Low
No
No
 - 22.06.2023 SB2023062245
SB2023062251
SB2023070337
and 18 more
#VU77578 - Use of Uninitialized Resource
CVE-2015-8390		 CWE-908 Medium
No
No
 - 20.06.2023 SB2015120209
SB2023062030
SB2023070335
and 14 more
#VU77577 - Integer overflow
CVE-2015-8394		 CWE-190 High
No
No
 - 20.06.2023 SB2015120209
SB2023062030
SB2023070335
and 14 more
#VU77576 - Memory corruption
CVE-2015-8386		 CWE-119 High
No
No
 - 20.06.2023 SB2015120209
SB2023062031
SB2024032815
and 14 more
#VU76672 - Integer overflow
CVE-2023-2610		 CWE-190 High
No
No
 - 30.05.2023 SB2023053072
SB2023060908
SB2023061307
and 19 more
#VU76671 - NULL Pointer Dereference
CVE-2023-2609		 CWE-476 Low
No
No
 - 30.05.2023 SB2023053071
SB2023060908
SB2023061307
and 15 more
#VU76670 - Use of Out-of-range Pointer Offset
CVE-2023-2426		 CWE-823 Low
No
No
 - 30.05.2023 SB2023053070
SB2023060908
SB2023061307
and 14 more
#VU76041 - Permissions, Privileges, and Access Controls
CVE-2023-2454		 CWE-264 Medium
No
No
 - 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 55 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540		 CWE-94 Medium
No
No
 - 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75389 - Resource exhaustion
CVE-2023-28450		 CWE-400 Medium
No
No
 - 20.04.2023 SB2023042040
SB2023042041
SB2023042042
and 30 more
#VU75270 - Improper input validation
CVE-2023-21912		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418162
SB2023050821
SB2023050824
and 11 more
#VU75271 - Improper input validation
CVE-2023-21980		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418162
SB2023050821
SB2023050824
and 13 more
#VU74628 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-28466		 CWE-362 Low
No
No
 - 10.04.2023 SB2023041032
SB2023041040
SB2023041041
and 79 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465		 CWE-347 Low
No
No
 - 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464		 CWE-400 Medium
No
No
 - 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU22585 - Heap-based Buffer Overflow
CVE-2019-12526		 CWE-122 High
No
No
 - 07.11.2019 SB2019110709
SB2019110710
SB2019112201
and 9 more
#VU32412 - Heap-based Buffer Overflow
CVE-2015-5073		 CWE-122 High
No
No
 - 13.12.2016 SB2016121380
SB2015070719
SB2023062030
and 4 more


Showing elements 1381 - 1400 out of 3943