Known vulnerabilities in Amazon Linux AMI - page 86

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84728 - Command injection
CVE-2023-51766		 CWE-77 Medium
No
No
 - 24.12.2023 SB2023122404
SB2024010334
SB2024010335
and 11 more
#VU84585 - Use After Free
CVE-2023-6932		 CWE-416 Low
No
No
 - 20.12.2023 SB2023122001
SB2024010909
SB2024011643
and 95 more
#VU84108 - Covert Timing Channel
CVE-2023-4421		 CWE-385 Medium
No
No
 - 12.12.2023 SB2023121264
SB2023121268
SB2024011506
and 3 more
#VU83883 - Stack-based buffer overflow
CVE-2023-40890		 CWE-121 High
No
No
 - 05.12.2023 SB2023120524
SB2023120525
SB2023122215
and 8 more
#VU83882 - Heap-based Buffer Overflow
CVE-2023-40889		 CWE-122 High
No
No
 - 05.12.2023 SB2023120524
SB2023120525
SB2023122215
and 8 more
#VU83850 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-3397		 CWE-362 Low
No
No
 - 04.12.2023 SB2023120455
SB2023120461
#VU81718 - Uncontrolled Recursion
CVE-2020-23804		 CWE-674 Medium
No
No
 - 10.10.2023 SB2023101001
SB2023101002
SB2023103152
and 9 more
#VU81254 - Memory corruption
CVE-2023-42117		 CWE-119 Critical
No
No
 - 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 10 more
#VU81253 - Stack-based buffer overflow
CVE-2023-42116		 CWE-121 Critical
No
No
 - 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 10 more
#VU80564 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-48565		 CWE-611 Medium
Available
No
 - 08.09.2023 SB2023090833
SB2023090836
SB2023101232
and 24 more
#VU80429 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-39362		 CWE-78 Medium
Available
No
 - 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 6 more
#VU80426 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-39364		 CWE-601 Low
No
No
 - 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 6 more
#VU80425 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39357		 CWE-89 Medium
No
No
 - 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 6 more
#VU79770 - NULL Pointer Dereference
CVE-2020-36024		 CWE-476 Medium
No
No
 - 21.08.2023 SB2023082124
SB2023082127
SB2023103150
and 9 more
#VU79769 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-36023		 CWE-835 Medium
No
No
 - 21.08.2023 SB2023082124
SB2023082127
SB2023102450
and 4 more
#VU78419 - Improper input validation
CVE-2023-22053		 CWE-20 Medium
No
No
 - 19.07.2023 SB2023071997
SB2023081543
SB2023090754
and 18 more
#VU62357 - Memory corruption
CVE-2022-1328		 CWE-119 High
No
No
 - 15.04.2022 SB2022041517
SB2022042821
SB2022110862
and 8 more
#VU45836 - Improper input validation
CVE-2020-16294		 CWE-20 Medium
No
No
 - 13.08.2020 SB2020082616
SB2020082617
SB2020083001
and 4 more
#VU45847 - Improper input validation
CVE-2020-16305		 CWE-20 Medium
No
No
 - 13.08.2020 SB2020082616
SB2020082617
SB2020083001
and 5 more
#VU32178 - Memory corruption
CVE-2016-5321		 CWE-119 Medium
No
No
 - 20.01.2017 SB2017012009
SB2017011334
SB2023100673
and 1 more


Showing elements 1701 - 1720 out of 3943