Known vulnerabilities in Amazon Linux AMI - page 85

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67915 - Use After Free
CVE-2022-40307		 CWE-416 Low
No
No
 - 05.10.2022 SB2022100504
SB2022101105
SB2022101994
and 41 more
#VU67913 - Missing release of memory after effective lifetime
CVE-2021-4159		 CWE-401 Low
No
No
 - 05.10.2022 SB2022100502
SB2022101105
SB2022101110
and 11 more
#VU67763 - Improper Authentication
CVE-2022-0730		 CWE-287 High
No
No
 - 29.09.2022 SB2022092972
SB2022092973
SB2022121931
and 5 more
#VU67510 - Improper input validation
CVE-2022-2663		 CWE-20 Medium
No
No
 - 20.09.2022 SB2022092042
SB2022092046
SB2022092047
and 74 more
#VU67477 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-3028		 CWE-362 Low
No
No
 - 20.09.2022 SB2022092003
SB2022092006
SB2022092007
and 63 more
#VU67049 - Use After Free
CVE-2022-3037		 CWE-416 High
No
No
 - 06.09.2022 SB2022090670
SB2022102101
SB2022112963
and 15 more
#VU66808 - Permissions, Privileges, and Access Controls
CVE-2022-36123		 CWE-264 Low
No
No
 - 29.08.2022 SB2022082919
SB2022082923
SB2022101105
and 5 more
#VU66788 - Memory corruption
CVE-2022-22728		 CWE-119 Medium
No
No
 - 27.08.2022 SB2022082706
SB2022101104
SB2023050336
and 5 more
#VU66628 - Heap-based Buffer Overflow
CVE-2022-2819		 CWE-122 High
No
No
 - 18.08.2022 SB2022081854
SB2022081859
SB2022090924
and 15 more
#VU66627 - Use After Free
CVE-2022-2817		 CWE-416 High
No
No
 - 18.08.2022 SB2022081854
SB2022081859
SB2022090924
and 15 more
#VU66591 - Out-of-bounds read
CVE-2022-1462		 CWE-125 Low
No
No
 - 17.08.2022 SB2022081737
SB2022081739
SB2022081740
and 49 more
#VU66550 - Resource Management Errors
CVE-2022-36879		 CWE-399 Low
No
No
 - 16.08.2022 SB2022081643
SB2022081647
SB2022082923
and 47 more
#VU66476 - Improper input validation
CVE-2022-36946		 CWE-20 Medium
Available
No
 - 13.08.2022 SB2022081305
SB2022081647
SB2022081739
and 73 more
#VU66397 - Double Free
CVE-2022-2588		 CWE-415 Low
Available
Exploited
 - 11.08.2022 SB2022081109
SB2022081110
SB2022081111
and 99 more
#VU66065 - Resource exhaustion
CVE-2022-1962		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU65833 - Out-of-bounds write
CVE-2021-33655		 CWE-787 Low
No
No
 - 27.07.2022 SB2022072725
SB2022072814
SB2022081739
and 77 more
#VU64920 - NULL Pointer Dereference
CVE-2022-2153		 CWE-476 Low
No
No
 - 05.07.2022 SB2022070608
SB2022070743
SB2022101105
and 32 more
#VU64861 - Use After Free
CVE-2022-1679		 CWE-416 Low
No
No
 - 02.07.2022 SB2022070218
SB2022070221
SB2022070717
and 82 more
#VU62081 - Type conversion
CVE-2022-28739		 CWE-704 High
No
No
 - 12.04.2022 SB2022041215
SB2022041404
SB2022060704
and 28 more


Showing elements 1681 - 1700 out of 3943