Known vulnerabilities in Amazon Linux AMI - page 70

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68116 - Inadequate Encryption Strength
CVE-2022-3358		 CWE-326 Medium
Available
No
 - 11.10.2022 SB2022101132
SB2022110133
SB2022110144
and 12 more
#VU67507 - NULL Pointer Dereference
CVE-2022-2085		 CWE-476 Medium
No
No
 - 20.09.2022 SB2022092030
SB2022092732
SB2022112203
and 5 more
#VU66522 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21233		 CWE-200 Low
No
No
 - 16.08.2022 SB2022081610
SB2022081724
SB2022081725
and 20 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 - 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 - 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU63348 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21151		 CWE-200 Low
No
No
 - 17.05.2022 SB2022051744
SB2022061204
SB2022062041
and 12 more
#VU63332 - Reachable Assertion
CVE-2022-0865		 CWE-617 Medium
No
No
 - 17.05.2022 SB2022051726
SB2022051729
SB2022072612
and 25 more
#VU63329 - Out-of-bounds write
CVE-2022-0891		 CWE-787 Medium
No
No
 - 17.05.2022 SB2022051726
SB2022051729
SB2022080141
and 24 more
#VU63328 - NULL Pointer Dereference
CVE-2022-0562		 CWE-476 Medium
No
No
 - 17.05.2022 SB2022051726
SB2022051729
SB2022072612
and 24 more
#VU63326 - NULL Pointer Dereference
CVE-2022-0561		 CWE-476 Medium
No
No
 - 17.05.2022 SB2022051726
SB2022051729
SB2022072612
and 27 more
#VU62802 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-20771		 CWE-835 Medium
No
No
 - 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 14 more
#VU62801 - NULL Pointer Dereference
CVE-2022-20796		 CWE-476 Medium
No
No
 - 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 11 more
#VU62800 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-20770		 CWE-835 Medium
No
No
 - 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 14 more
#VU62798 - Missing release of memory after effective lifetime
CVE-2022-20785		 CWE-401 Medium
No
No
 - 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 13 more
#VU62768 - Uncontrolled Memory Allocation
CVE-2022-1473		 CWE-789 Low
No
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 18 more
#VU62767 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2022-1434		 CWE-300 Low
No
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 10 more
#VU62766 - Security Features
CVE-2022-1343		 CWE-254 Medium
No
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 14 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Available
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU59832 - Improper input validation
CVE-2022-20698		 CWE-20 Medium
No
No
 - 19.01.2022 SB2022011924
SB2022011853
SB2022011955
and 8 more


Showing elements 1381 - 1400 out of 3943