Known vulnerabilities in Amazon Linux AMI - page 77

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73857 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-38371		 CWE-300 Medium
No
No
 - 20.03.2023 SB2022082219
SB2023040605
SB2024071024
and 2 more
#VU73766 - Double Free
CVE-2023-26545		 CWE-415 Low
No
No
 - 16.03.2023 SB2023031649
SB2023031652
SB2023031653
and 93 more
#VU73169 - Divide By Zero
CVE-2023-1127		 CWE-369 Low
No
No
 - 08.03.2023 SB2023030818
SB2023031642
SB2023031656
and 17 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522		 CWE-113 Medium
No
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU72432 - Heap-based Buffer Overflow
CVE-2022-48303		 CWE-122 High
No
No
 - 21.02.2023 SB2023022105
SB2023022111
SB2023022112
and 72 more
#VU72341 - Divide By Zero
CVE-2023-0512		 CWE-369 Low
No
No
 - 16.02.2023 SB2023021674
SB2023031642
SB2023031656
and 11 more
#VU71560 - Heap-based Buffer Overflow
CVE-2023-0288		 CWE-122 High
No
No
 - 26.01.2023 SB2023012622
SB2023013071
SB2023013073
and 15 more
#VU71558 - Heap-based Buffer Overflow
CVE-2023-0433		 CWE-122 High
No
No
 - 26.01.2023 SB2023012624
SB2023012627
SB2023013071
and 21 more
#VU71473 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-4254		 CWE-90 High
No
No
 - 24.01.2023 SB2023012437
SB2023012440
SB2023012457
and 13 more
#VU71352 - NULL Pointer Dereference
CVE-2023-0394		 CWE-476 Low
No
No
 - 19.01.2023 SB2023011912
SB2023012450
SB2023022176
and 68 more
#VU70468 - Improper input validation
CVE-2022-3643		 CWE-20 Medium
No
No
 - 21.12.2022 SB2022122149
SB2022122164
SB2022122165
and 46 more
#VU69756 - Missing release of memory after effective lifetime
CVE-2022-3524		 CWE-401 Medium
No
No
 - 30.11.2022 SB2022113027
SB2022113032
SB2022113033
and 63 more
#VU67731 - NULL Pointer Dereference
CVE-2022-37797		 CWE-476 Medium
No
No
 - 29.09.2022 SB2022092907
SB2022092908
SB2022103103
and 3 more
#VU67506 - Heap-based Buffer Overflow
CVE-2020-27792		 CWE-122 High
No
No
 - 20.09.2022 SB2019081208
SB2022092031
SB2022092732
and 3 more
#VU66467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-42771		 CWE-22 Medium
No
No
 - 12.08.2022 SB20211214110
SB2022081226
SB2022083038
and 18 more
#VU59660 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43818		 CWE-79 Low
No
No
 - 17.01.2022 SB2022011721
SB2022011724
SB2022050418
and 23 more
#VU56000 - Command injection
CVE-2021-3621		 CWE-77 Medium
No
No
 - 20.08.2021 SB2021082002
SB2021082206
SB2021083125
and 19 more
#VU48793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-27783		 CWE-79 Medium
No
No
 - 03.12.2020 SB2020120602
SB2020120603
SB2020121305
and 20 more
#VU9425 - Exposure of sensitive information to an unauthorized actor
CVE-2017-10140		 CWE-200 Low
No
No
 - 27.11.2017 SB2017112127
SB2017112128
SB2017112129
and 3 more


Showing elements 1521 - 1540 out of 3943