Amazon Linux AMI : perl-Image-ExifTool (ALAS-2022-1566)

The version of perl-Image-ExifTool installed on the remote host is prior to 12.38-1.3. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1566 advisory. lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check. CVE-2022-23935 Tenable has extracted...

AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US

No description provided...

Amazon Linux AMI : kernel (ALAS-2022-1563)

The version of kernel installed on the remote host is prior to 4.14.262-135.489. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1563 advisory. 2025-01-30: CVE-2021-47483 was added to this advisory. 2025-01-30: CVE-2021-47506 was added to this advisory. A fla...

Amazon Linux AMI : log4j (ALAS-2022-1562)

The version of log4j installed on the remote host is prior to 1.2.17-16.12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1562 advisory. It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event...

Amazon Linux AMI : cyrus-imapd (ALAS-2022-1559)

The version of cyrus-imapd installed on the remote host is prior to 2.4.22-1.10. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1559 advisory. A flaw was found in cyrus-imapd. A bad string hashing algorithm used in internal hash tables allows user inputs to be stored...

Amazon Linux AMI : vim (ALAS-2022-1557)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1557 advisory. 2024-05-09: CVE-2020-20703 was added to this advisory. Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter. CVE-2020-20703...

Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2022-1561)

The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.312.b07-0.65. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1561 advisory. Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component:...

Amazon Linux AMI : httpd24 (ALAS-2022-1560)

The version of httpd24 installed on the remote host is prior to 2.4.52-1.95. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1560 advisory. There's a null pointer dereference and server-side request forgery flaw in httpd's modproxy module, when it is configur...

Amazon Linux AMI : busybox (ALAS-2022-1558)

The version of busybox installed on the remote host is prior to 1.34.1-1.13. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1558 advisory. A flaw was found in BusyBox, where it did not properly sanitize while processing a crafted shell command, leading to a...

The vulnerability of the NSS cryptographic libraries in the Amazon Linux AMI operating system allows a hacker to execute arbitrary code.

The vulnerability of the NSS cryptographic libraries in the Amazon Linux AMI operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Amazon Linux AMI : log4j-cve-2021-44228-hotpatch (ALAS-2021-1554)

The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.1-13. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1554 advisory. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-13 will now explicitly mimic...

Amazon Linux AMI : java-1.8.0-openjdk, java-1.7.0-openjdk, java-1.6.0-openjdk (ALAS-2021-1553)

The version of java-1.6.0-openjdk installed on the remote host is prior to 1.6.0.41-1.13.13.1.78. The version of java-1.7.0-openjdk installed on the remote host is prior to 1.7.0.261-2.6.22.1.84. The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.312.b07-0.66. It is,...

AWS, Other Cloud Services Affected by Flaws in Eltima SDK

Researchers have found a number of high-security vulnerabilities in a library created by network virtualization firm Eltima, that leave about a dozen cloud services used by millions of users worldwide open to privilege-escalation attacks. That includes Amazon WorkSpaces, Accops and NoMachine, amo...

Amazon Linux AMI : nss (ALAS-2021-1552)

The version of nss installed on the remote host is prior to 3.53.1-7.87. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1552 advisory. NSS Network Security Services up to and including 3.73 is vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS...

Amazon Linux AMI : containerd, docker (ALAS-2021-1551)

The version of containerd installed on the remote host is prior to 1.4.6-7.11. The version of docker installed on the remote host is prior to 20.10.7-5.76. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1551 advisory. In the OCI Distribution Specification version 1.0...

Amazon Linux AMI : curl (ALAS-2021-1549)

The version of curl installed on the remote host is prior to 7.61.1-12.100. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1549 advisory. A flaw was found in curl. This flaw lies in the --ssl-reqd option or related settings in libcurl. Users specify this fla...

Amazon Linux AMI : docker (ALAS-2021-1550)

The version of docker installed on the remote host is prior to 20.10.7-2.69. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1550 advisory. A flaw was found in the userns-remap feature of Docker. The root user in the remapped namespace can modify files under...

Amazon Linux AMI : mysql57 (ALAS-2021-1544)

The version of mysql57 installed on the remote host is prior to 5.7.35-1.17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1544 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are...

Amazon Linux AMI : tomcat8 (ALAS-2021-1547)

The version of tomcat8 installed on the remote host is prior to 8.5.69-1.88. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1547 advisory. Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP...

Amazon Linux AMI : c-ares (ALAS-2021-1545)

The version of c-ares installed on the remote host is prior to 1.17.2-1.8. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1545 advisory. A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can...