Known vulnerabilities in Amazon Linux AMI - page 94

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64190 - Incorrect Regular Expression
CVE-2022-24836		 CWE-185 Low
No
No
 - 12.06.2022 SB2022061205
SB2022061209
SB2022111849
and 11 more
#VU64007 - Resource exhaustion
CVE-2022-31030		 CWE-400 Medium
No
No
 - 07.06.2022 SB2022060702
SB2022061206
SB2022061326
and 23 more
#VU63045 - Out-of-bounds write
CVE-2022-1381		 CWE-787 High
No
No
 - 11.05.2022 SB2022052018
SB2022061208
SB2022062022
and 17 more
#VU63044 - Use of Out-of-range Pointer Offset
CVE-2022-1420		 CWE-823 Low
No
No
 - 11.05.2022 SB2022052018
SB2022061208
SB2022062022
and 18 more
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903		 CWE-122 High
No
No
 - 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more
#VU62360 - Heap-based Buffer Overflow
CVE-2022-1160		 CWE-122 High
No
No
 - 15.04.2022 SB2022041525
SB2022041528
SB2022041529
and 7 more
#VU61763 - Use After Free
CVE-2022-1154		 CWE-416 High
No
No
 - 31.03.2022 SB2022033113
SB2022033115
SB2022041528
and 33 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391		 CWE-93 Medium
No
No
 - 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU61600 - Permissions, Privileges, and Access Controls
CVE-2022-24769		 CWE-264 Medium
No
No
 - 24.03.2022 SB2022032414
SB2022032503
SB2022042141
and 29 more
#VU61287 - Improper input validation
CVE-2022-22719		 CWE-20 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 32 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU61284 - Out-of-bounds write
CVE-2022-23943		 CWE-787 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU60786 - Heap-based Buffer Overflow
CVE-2022-0361		 CWE-122 High
No
No
 - 22.02.2022 SB2022022221
SB2022031527
SB2022032446
and 31 more
#VU60783 - Heap-based Buffer Overflow
CVE-2022-0392		 CWE-122 High
No
No
 - 22.02.2022 SB2022022221
SB2022031527
SB2022032446
and 27 more
#VU60772 - Heap-based Buffer Overflow
CVE-2022-0359		 CWE-122 High
No
No
 - 22.02.2022 SB2022022220
SB2022022221
SB2022031527
and 30 more
#VU60770 - Heap-based Buffer Overflow
CVE-2022-0318		 CWE-122 High
No
No
 - 22.02.2022 SB2022022220
SB2022022221
SB2022031527
and 34 more
#VU60769 - Heap-based Buffer Overflow
CVE-2022-0261		 CWE-122 High
No
No
 - 22.02.2022 SB2022022220
SB2022022221
SB2022031527
and 32 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235		 CWE-94 High
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU32475 - Memory corruption
CVE-2014-3634		 CWE-119 Medium
No
No
 - 02.11.2014 SB2014110202
SB2014120519
SB2014101517
and 6 more


Showing elements 1861 - 1880 out of 3943