Amazon Linux AMI : ImageMagick (ALAS-2024-1926)

The version of ImageMagick installed on the remote host is prior to 6.9.10.68-3.22. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1926 advisory. Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial...

PT-2024-11550 · Ami · Ami Ntfs Driver

Name of the Vulnerable Software and Affected Versions: AMI NTFS driver version 1.0.0 Description: The AMI NTFS driver has a buffer overflow issue. This driver is used in certain devices, such as those from ASUS. The issue was reported and fixed by AMI in late 2021, but as of now, the fix may not ...

Amazon Linux AMI : cpio (ALAS-2024-1925)

The version of cpio installed on the remote host is prior to 2.10-12.13. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1925 advisory. cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a...

Amazon Linux AMI : less (ALAS-2024-1924)

The version of less installed on the remote host is prior to 436-13.13. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1924 advisory. closealtfile in filename.c in less before 606 omits shellquote calls for LESSCLOSE. CVE-2022-48624 Tenable has extracted the precedin...

Amazon Linux AMI : kernel (ALAS-2024-1923)

The version of kernel installed on the remote host is prior to 4.14.336-180.562. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1923 advisory. A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly...

Amazon Linux AMI : sudo (ALAS-2024-1922)

The version of sudo installed on the remote host is prior to 1.8.23-10.59. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1922 advisory. 2024-06-07: CVE-2024-31969 was added to this advisory. In sudo-1.8.23-10.amzn2.3.6 Amazon Linux 2 and sudo-1.8.23-10.58.amzn1 Amaz...

Security Advisory 0092

Security Advisory 0092 PDF Date: February 20, 2024 Revision | Date | Changes ---|---|--- 1.0 | February 20, 2024 | Initial release CVSSv3.1 Base Score: 9.8 CVSS:3.1AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Common Weakness Enumeration: CWE-1394 Use of default cryptographic key This vulnerability is bein...

Amazon Linux AMI : amazon-ssm-agent (ALAS-2024-1920)

The version of amazon-ssm-agent installed on the remote host is prior to 3.2.2222.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1920 advisory. 2024-04-25: CVE-2023-49568 was added to this advisory. 2024-02-28: CVE-2023-39325 was added to this advisory...

Amazon Linux AMI : kernel (ALAS-2024-1919)

The version of kernel installed on the remote host is prior to 4.14.336-179.559. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1919 advisory. A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privile...

Amazon Linux AMI : php72 (ALAS-2024-1921)

The version of php72 installed on the remote host is prior to 7.2.26-1.19. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1921 advisory. 2024-02-28: CVE-2019-11045 was added to this advisory. 2024-02-28: CVE-2019-11049 was added to this advisory. 2024-02-28:...

Multi-vendor BIOS Security Vulnerabilities (February, 2024) - Lenovo Support US

No description provided...

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

Amazon Linux AMI : sudo (ALAS-2024-1917)

The version of sudo installed on the remote host is prior to 1.8.23-10.58. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1917 advisory. 2024-02-23: CVE-2023-42465 was removed from this advisory. 2024-02-23: The severity of this advisory has been changed from importa...

Amazon Linux AMI : squid (ALAS-2024-1916)

The version of squid installed on the remote host is prior to 3.5.20-17.54. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1916 advisory. Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1...

Amazon Linux AMI : cacti (ALAS-2024-1915)

The version of cacti installed on the remote host is prior to 1.1.19-6.24. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1915 advisory. Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection SQLi vulnerabili...

Amazon Linux AMI : libtiff (ALAS-2024-1913)

The version of libtiff installed on the remote host is prior to 4.0.3-35.50. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1913 advisory. An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen API may allow a remote attacker to cause a...

Amazon Linux AMI : postfix (ALAS-2024-1914)

The version of postfix installed on the remote host is prior to 2.6.6-2.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1914 advisory. Postfix through 3.8.4 allows SMTP smuggling unless configured with smtpddatarestrictions=rejectunauthpipelining and...

Amazon Linux AMI : kernel (ALAS-2024-1912)

"The version of kernel installed on the remote host is prior to 4.14.336-179.557. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1912 advisory. An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 netfilter:...

Amazon Linux AMI : runc (ALAS-2024-1911)

The version of runc installed on the remote host is prior to 1.1.11-1.1. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1911 advisory. AWS is aware of CVE-2024-21626, an issue affecting the runc component of several open source container management systems. Under...

AMI UEFI Firmware January 2024 EDK II Reference Vulnerabilities

Potential EDK II reference code vulnerabilities have been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerabilities. AMI has released updates to mitigate the potential...