Known vulnerabilities in Amazon Linux AMI - page 78

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72246 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-22490		 CWE-59 Low
No
No
 - 15.02.2023 SB2023021529
SB2023021528
SB2023021533
and 31 more
#VU72245 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-23946		 CWE-59 Medium
No
No
 - 15.02.2023 SB2023021529
SB2023021528
SB2023021533
and 28 more
#VU72079 - Resource Management Errors
CVE-2022-44267		 CWE-399 Low
Available
No
 - 09.02.2023 SB2023020911
SB2023021005
SB2023021560
and 16 more
#VU72078 - Exposure of sensitive information to an unauthorized actor
CVE-2022-44268		 CWE-200 Medium
Available
No
 - 09.02.2023 SB2023020911
SB2023021005
SB2023021560
and 16 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU70505 - NULL Pointer Dereference
CVE-2022-41860		 CWE-476 Medium
No
No
 - 27.12.2022 SB2022122727
SB2022122728
SB2022122729
and 14 more
#VU68517 - Improper input validation
CVE-2022-39253		 CWE-20 Low
Available
No
 - 19.10.2022 SB2022101995
SB2022101996
SB2022101997
and 41 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 - 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 - 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68074 - Missing release of memory after effective lifetime
CVE-2021-3574		 CWE-401 Medium
No
No
 - 10.10.2022 SB2022101002
SB2022101005
SB2022112407
and 12 more
#VU67130 - Integer overflow
CVE-2021-20224		 CWE-190 High
No
No
 - 08.09.2022 SB2022090828
SB2022090829
SB2022090830
and 6 more
#VU64949 - Type conversion
CVE-2022-32547		 CWE-704 Low
No
No
 - 06.07.2022 SB2022070617
SB2022070618
SB2022070619
and 10 more
#VU64948 - Integer overflow
CVE-2022-32546		 CWE-190 Low
No
No
 - 06.07.2022 SB2022070616
SB2022070618
SB2022070619
and 12 more
#VU64947 - Integer overflow
CVE-2022-32545		 CWE-190 Low
No
No
 - 06.07.2022 SB2022070613
SB2022070618
SB2022070619
and 8 more
#VU63956 - Stack-based buffer overflow
CVE-2022-27239		 CWE-121 Low
No
No
 - 02.06.2022 SB2022042911
SB2022060218
SB2022060832
and 16 more
#VU62856 - Improper input validation
CVE-2021-4219		 CWE-20 Medium
No
No
 - 09.05.2022 SB2022112407
SB2022112416
SB2023030747
and 1 more
#VU62851 - Memory corruption
CVE-2022-28463		 CWE-119 High
No
No
 - 09.05.2022 SB2022050924
SB2022060125
SB2022060203
and 9 more
#VU52501 - Server-Side Request Forgery (SSRF)
CVE-2020-11987		 CWE-918 Medium
No
No
 - 23.04.2021 SB2021042315
SB2021042316
SB2021042514
and 32 more
#VU31907 - Resource exhaustion
CVE-2019-14834		 CWE-400 Low
No
No
 - 07.01.2020 SB2019121131
SB2019121940
SB2020093042
and 7 more


Showing elements 1541 - 1560 out of 3943